terraform-associate question 352 discussion

View all HashiCorp Certified: Terraform Associate Exam here
back to hashicorp forum

Question 352

When does Sentinel enforce policy logic during a Terraform Enterprise run?

  • A. Before the plan phase
  • B. During the plan phase
  • C. Before the a apply phase
  • D. After the apply phase
Answer:

B


User Votes:
A
50%
B
50%
C 2 votes
50%
D
50%
Discussions
0 / 1000
nassimaelferkhsi
3 months, 4 weeks ago

The Sentinel policy logic in Terraform Enterprise is enforced before the apply phase.

nassimaelferkhsi
3 months, 3 weeks ago

Aamir_Ahmed
3 weeks, 6 days ago

The answer is C:
Why the other options are incorrect?
A. Before the plan phase ❌

Sentinel requires a Terraform plan output to analyze infrastructure changes, so it cannot run before the plan phase.
B. During the plan phase ❌

Terraform generates the plan first, then Sentinel enforces policies after the plan is completed but before apply begins.
D. After the apply phase ❌

Sentinel prevents non-compliant changes before they are applied. Running it after apply would be too late for enforcement.
Conclusion:
✅ Sentinel enforces policies before the apply phase to prevent non-compliant infrastructure