What type of token does not have a TTL (time to live)?

A. default tokens

B. parent tokens

C. user tokens

D. root tokens

E. expired tokens

F. child tokens

An administrator wants to create a new KV mount for individual users to maintain their own secrets but needs a way to simplify the policy so they don't need to write a new one for each new user? With the requirements listed below, what would such a policy look like? Requirement: Each user can perform all operations on their allocated key/value secret path

A. path "user-kv/data/{{identity.entity.name}}/*" { capabilities = [ "create", "update", "read", "delete", "list" ] }

B. path "user-kv/data/{{identity.entity.id.name}}/*" { capabilities = [ "create", "update", "read", "delete", "list" ] }

C. path "user-kv/data/{{identity.entity.aliases.<>.id}}/*" { capabilities = [ "create", "update", "read", "delete", "list" ] }

D. path "user-kv/data/{{user}}/*" { capabilities = [ "create", "update", "read", "delete", "list" ] }

True or False:

Workspaces provide identical functionality in the open-source, Terraform Cloud, and Enterprise versions of

Terraform.

A. True

B. False

Select the answer below that completes the following statement: Terraform Cloud can be managed from the CLI but requires __________?

A. a TOTP token

B. a username and password

C. authentication using MFA

D. an API token

Which of the following variable declarations is going to result in an error?

A. variable "example" { type = object({}) }

B. variable "example" {}

C. variable "example" { description = "This is a test" type = map default = {"one" = 1, "two" = 2, "Three" = "3"} }

D. variable "example" { description = "This is a variable description" type = list(string) default = {} }