terraform-associate question 352 discussion

View all HashiCorp Certified: Terraform Associate Exam here
back to hashicorp forum

Question 352

When does Sentinel enforce policy logic during a Terraform Enterprise run?

  • A. Before the plan phase
  • B. During the plan phase
  • C. Before the a apply phase
  • D. After the apply phase
Answer:

B


User Votes:
A
0%
B
0%
C 3 votes
100%
D
0%
Discussions
0 / 1000
nassimaelferkhsi
5 months, 1 week ago

The Sentinel policy logic in Terraform Enterprise is enforced before the apply phase.

nassimaelferkhsi
5 months, 1 week ago

Aamir_Ahmed
2 months, 1 week ago

The answer is C:
Why the other options are incorrect?
A. Before the plan phase ❌

Sentinel requires a Terraform plan output to analyze infrastructure changes, so it cannot run before the plan phase.
B. During the plan phase ❌

Terraform generates the plan first, then Sentinel enforces policies after the plan is completed but before apply begins.
D. After the apply phase ❌

Sentinel prevents non-compliant changes before they are applied. Running it after apply would be too late for enforcement.
Conclusion:
✅ Sentinel enforces policies before the apply phase to prevent non-compliant infrastructure