CompTIA Linux+ XK0-006 (V8) Practice Question

Your organization uses OpenTofu to provision cloud infrastructure. The security team has found that the local terraform.tfstate file written on each developer workstation exposes sensitive values such as passwords and cloud-resource IDs. They require that, during normal operation, no state file is persisted on individual machines, while still allowing multiple engineers to collaborate on the same configuration from their laptops. Which change best meets this requirement with minimal redesign of the existing workflow?

  • Add terraform.tfstate to the project's .gitignore file to prevent it from being checked in to version control.

  • Configure a supported remote backend (for example S3, Consul, or TACOS) and remove the default local backend so state is stored remotely.

  • Always run tofu plan and tofu apply with the -refresh=false flag so no state data is written locally.

  • Set an environment variable named TOFU_STATE_ENCRYPT=1 so OpenTofu keeps state only in encrypted memory.

CompTIA Linux+ XK0-006 (V8)
Automation, Orchestration, and Scripting
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot