Quiz¶
66 scenario questions across 6 topics, covering every concept in the Architect's Reference plus real incidents from the hands-on GCP and multi-repo sandbox sessions. Each page scores independently.
| Topic | Questions | Covers | Reference Articles |
|---|---|---|---|
| Providers, Auth, Versions & Backends | 10 | ADC, required_providers vs provider {}, fallback defaults, ~> constraints, .terraform.lock.hcl, provider aliasing, partial GCS backend, Org Policy 412 |
§1, §2 |
| Resources, Data Sources, State, Lifecycle & Surgery | 12 | data vs resource, non-atomic apply, clobber vs 409, import vs recreate, import diff trap, moved {}, prevent_destroy, ignore_changes, create_before_destroy, plan state-read security |
§2, §3, §8, §9 |
| Variables, Locals, Repetition, Outputs & Guards | 13 | 5-level variable precedence, sensitive = true plaintext state, volatile timestamp(), validation {}, count index shift vs for_each, plan-time unknown keys, dynamic blocks, -raw vs -json, count = 0, guard propagation |
§5, §6, §7, §8 |
| Dependencies, Modules, Multi-Repo & CI/CD Security | 12 | Implicit DAG vs depends_on, module state prefixing, archive_file vs local-exec, Consul KV vs terraform_remote_state, IAM grant ownership, workspaces vs directories, root blast radius, GitOps PR attack surface |
§4, §8, §9, §10 |
| GKE, Workload Identity & GCP Networking | 13 | Dedicated node SA, remove_default_node_pool transient pool, 4-part Workload Identity, IAM vs RBAC, node Capacity vs Allocatable (e2-small vs e2-standard-2), IAP TCP forwarding (35.235.240.0/20), VPC Peering, linux/amd64 manifests |
§10 |
| Debugging, Recovery & Verification Methodology | 6 | Hypothesis ordering, independent verification (kubectl/gcloud/consul), empty terraform.tfstate trap, local dependency readiness checks |
§9, §10 |
Provenance Tags¶
Every <quiz> block carries a non-rendering <!-- source: ... --> comment (session-01 through session-04 for live incidents, and reference-01 through reference-10 for architectural reference concepts).