# Terraform-Associate — Question 428

**Type:** multiple_choice
**Topics:** topic_1

## Question

Which option cannot be used to keep secrets out of Terraform configuration files?

## Correct Answer

_See scenario._

## Explanation

Selected Answer: B
It's B

The sensitive flag only prevents secret from showing up in the CLI outputs, but the value itself is still present in the configuration files.

**Reference:** examtopics_top_comment

---
Source: https://hiexam.net/q/hashicorp/Terraform-Associate/428  
Practice (tracked): https://hiexam.net/study/Terraform-Associate/practice