1Z0-997-25 Question 22
Select 2Your development team has started using Terraform to provision OCI resources. They have a large, distributed team working on the same infrastructure code and want to ensure that Terraform state is securely managed while still allowing multiple engineers to collaborate on the same environment. Which two approaches would most reliably address their requirements for secure and consistent Terraform state management in OCI?
- A
Use the local file system on each engineer� machine for storing Terraform state
- B
Leverage Oracle Resource Manager� integrated state management within OCI
- C
Commit and push the Terraform state file into a version control repository (e.g., Git)
- D
Configure an OCI Object Storage bucket as the remote backend with encryption and versioning
Show answer and explanation
Correct answers: B, D
Explanation
For collaborative Infrastructure as Code (IaC) environments, using remote state management is a best practice. Oracle Resource Manager offers native Terraform state storage within OCI, while an Object Storage bucket backend provides secure, centralized state tracking. Storing or versioning the state file locally in Git introduces reliability and security risks. Refer to OCI� Terraform and Resource Manager documentation for details on configuring these backends and managing state in a multi-user setup.
- A. Incorrect.
Incorrect: Storing the state file locally on an individual machine can cause file version conflicts, loss of data if the machine fails, and security risks. It lacks central management and collaboration controls, making it unsuitable for multi-engineer teams.
- B. Correct.
Correct: Oracle Resource Manager automatically handles Terraform state files, providing a secure and collaborative environment. It stores the state in OCI, simplifying state management for teams and reducing the risk of concurrency conflicts.
- C. Incorrect.
Incorrect: Committing the state file to a version control system is risky because the file may contain sensitive information such as resource IDs and credentials. This also leads to merge conflicts in multi-engineer workflows.
- D. Correct.
Correct: Using an OCI Object Storage bucket as your remote backend is a recommended Terraform best practice. It supports encryption-at-rest, versioning, and locks the state to prevent concurrency issues, helping large teams collaborate safely.