You want to use API tokens and other secrets within your team's Terraform workspaces. Where does HashiCorp recommend you store these sensitive values? (Pick the 3 correct responses)

The correct answer is A. In an HCP Terraform/Terraform Cloud variable, with the sensitive option checked. B. In HashiCorp Vault. C. In a terraform.tfvars file, securely managed and shared with your team. Sensitive values such as API tokens should be stored in a secure way, either in Terraform Cloud variables marked as sensitive or in HashiCorp Vault. Storing secrets in version control systems or plaintext files is not recommended.

Submitted by diego_uy· Apr 18, 2026Work with Terraform Configurations

Question

You want to use API tokens and other secrets within your team's Terraform workspaces. Where does HashiCorp recommend you store these sensitive values? (Pick the 3 correct responses)

Options

AIn an HCP Terraform/Terraform Cloud variable, with the sensitive option checked.
BIn HashiCorp Vault.
CIn a terraform.tfvars file, securely managed and shared with your team.
DIn a terraform.tfvars file, checked into your version control system.
EIn a plaintext document on a shared drive.

How the community answered

(17 responses)

A
88% (15)
D
6% (1)
E
6% (1)

Explanation

Sensitive values such as API tokens should be stored in a secure way, either in Terraform Cloud variables marked as sensitive or in HashiCorp Vault. Storing secrets in version control systems or plaintext files is not recommended.

Topics

#Secrets Management#Sensitive Variables#Terraform Cloud#HashiCorp Vault

Community Discussion

No community discussion yet for this question.

Full TERRAFORM-ASSOCIATE-004 Practice