HashiCorp Certified: Terraform Associate (003) practice questions

1. Question 1 of 25

   As a developer, you want to ensure your plugins are up-to-date with the latest versions. Which Terraform command should you use?

   • Aterraform refresh -upgrade
   • Bterraform apply -upgrade
   • Cterraform providers -upgrade
   • Dterraform init -upgrade

   Show answer

   Correct answer: D

   How others answered

   • D100%

2. Question 2 of 25

   The terraform.tfstate file always matches your currently built infrastructure.

   • ATrue
   • BFalse

   Show answer

   Correct answer: B

   How others answered

   • B92%
   • A8%

3. Question 3 of 25

   Your security team scanned some Terraform workspaces and found secrets stored in plaintext in state files. How can you protect that data?

   • ADelete the state file every time you run Terraform.
   • BStore the state in an encrypted backend.
   • CAlways store your secrets in a secrets.tfvars file.
   • DEdit your state file to scrub out the sensitive data.

   Show answer

   Correct answer: B

   How others answered

   • B100%

4. Question 4 of 25

   One remote backend configuration always maps to a single remote workspace.

   • ATrue
   • BFalse

   Show answer

   Correct answer: B

   How others answered

   • B88%
   • A12%

5. Question 5 of 25

   You can reference a resource created with for_each using a splat ( * ) expression.

   • ATrue
   • BFalse

   Show answer

   Correct answer: B

   How others answered

   • B75%
   • A25%

6. Question 6 of 25

   How is the Terraform remote backend different than other state backends such as S3, Consul, etc.?

   • AIt can execute Terraform runs on dedicated infrastructure on premises or in Terraform Cloud
   • BIt doesn't show the output of a terraform apply locally
   • CIt is only available to paying customers
   • DAll of the above

   Show answer

   Correct answer: A

   How others answered

   • A100%

7. Question 7 of 25

   You add a new resource to an existing Terraform configuration, but do not update the version constraint in the configuration. The existing and new resources use the same provider. The working directory contains a .terraform.lock.hcl file. How will Terraform choose which version of the provider to use?

   • ATerraform will use the latest version of the provider for the new resource and the version recorded in the lock file to manage existing resources.
   • BTerraform will use the version recorded in your lock file.
   • CTerraform will check your state file to determine the provider version to use.
   • DTerraform will use the latest version of the provider available at the time you provision your new resource.

   Show answer

   Correct answer: B

   How others answered

   • B100%

8. Question 8 of 25

   What is the workflow for deploying new infrastructure with Terraform?

   • Aterraform plan to import the current infrastructure to the state file, make code changes, and terraform apply to update the infrastructure.
   • BWrite a Terraform configuration, run terraform show to view proposed changes, and terraform apply to create new infrastructure.
   • Cterraform import to import the current infrastructure to the state file, make code changes, and terraform apply to update the infrastructure.
   • DWrite a Terraform configuration, run terraform init, run terraform plan to view planned infrastructure changes, and terraform apply to create new infrastructure.

   Show answer

   Correct answer: D

   How others answered

   • D100%

9. Question 9 of 25

   All standard backend types support state storage, locking, and remote operations like plan, apply, and destroy.

   • ATrue
   • BFalse

   Show answer

   Correct answer: B

   How others answered

   • B100%

10. Question 10 of 25

    A provider configuration block is required in every Terraform configuration. Example:

    

    • ATrue
    • BFalse

    Show answer

    Correct answer: B

    How others answered

    • B70%
    • A30%

    Only 70% agreed on this answer — treat it as contested rather than settled.

11. Question 11 of 25

    A resource block is shown in the Exhibit section of this page.

    

    How would you reference the attribute name of this resource in HCL?

    • Adata.kubernetes_namespace.name
    • Bkubernetes_namespace.example.name
    • Ckubernetes_namespace.test.name
    • Dresource.kubernetes_namespace.example.name

    Show answer

    Correct answer: B

    How others answered

    • B100%

12. Question 12 of 25

    You run a local-exec provisioner in a null resource called null_resource.run_script and realize that you need to rerun the script. Which of the following commands would you use first?

    • Aterraform taint null_resource.run_script
    • Bterraform apply -target=null_resource.run_script
    • Cterraform validate null_resource.run_script
    • Dterraform plan -target=null_resource.run_script

    Show answer

    Correct answer: A

    How others answered

    • A73%
    • B21%
    • D6%

    Only 73% agreed on this answer — treat it as contested rather than settled.

13. Question 13 of 25

    Which argument(s) are required when declaring a Terraform variable?

    • Atype
    • Bdefault
    • Cdescription
    • DAll of the above
    • ENone of the above

    Show answer

    Correct answer: E

    How others answered

    • E80%
    • A20%

14. Question 14 of 25

    Which provisioner invokes a process on the resource created by Terraform?

    • Aremote-exec
    • Bnull-exec
    • Clocal-exec
    • Dfile

    Show answer

    Correct answer: A

    How others answered

    • A100%

15. Question 15 of 25

    terraform apply is failing with the following error. What next step should you take to determine the root cause of the problem? Error loading state: AccessDenied: Access Denied status code: 403, request id: 288766CE5CCA24A0, host id: web.example.com

    • ARun terraform login to reauthenticate with the provider.
    • BReview /var/log/terraform.log for error messages.
    • CReview syslog for Terraform error messages.
    • DSet TF_LOG=DEBUG.

    Show answer

    Correct answer: D

    How others answered

    • D100%

16. Question 16 of 25

    Which of the following is not true of Terraform providers?

    • AProviders can be written by individuals
    • BProviders can be maintained by a community of users
    • CSome providers are maintained by HashiCorp
    • DMajor cloud vendors and non-cloud vendors can write, maintain, or collaborate on Terraform providers
    • ENone of the above

    Show answer

    Correct answer: E

    How others answered

    • E95%
    • D5%

17. Question 17 of 25

    Which Terraform command checks that your configuration syntax is correct?

    • Aterraform show
    • Bterraform init
    • Cterraform fmt
    • Dterraform validate

    Show answer

    Correct answer: D

    How others answered

    • D100%

18. Question 18 of 25

    What command does Terraform require the first time you run it within a configuration directory?

    • Aterraform import
    • Bterraform init
    • Cterraform plan
    • Dterraform workspace

    Show answer

    Correct answer: B

    How others answered

    • B100%

19. Question 19 of 25

    How does the HCP Terraform/Terraform Cloud integration differ from backends such as S3, Consul, etc.?

    • AIt can execute Terraform runs on dedicated infrastructure in HCP Terraform/Terraform Cloud.
    • BIt doesn’t show the output of a terraform apply locally.
    • CIt is only available to paying customers.
    • DAll of the above.

    Show answer

    Correct answer: A

    How others answered

    • A75%
    • D25%

20. Question 20 of 25

    You have deployed a new webapp with a public IP address on a cloud provider. However, you did not create any outputs for your code. What is the best method to quickly find the IP address of the resource you deployed?

    • ARun terraform output ip_address to view the result
    • BIn a new folder, use the terraform_remote_state data source to load in the state file, then write an output for each resource that you find the state file
    • CRun terraform state list to find the name of the resource, then terraform state show to find the attributes including public IP address
    • DRun terraform destroy then terraform apply and look for the IP address in stdout

    Show answer

    Correct answer: C

    How others answered

    • C100%

21. Question 21 of 25

    Which of these actions will prevent two Terraform runs from changing the same state file at the same time?

    • ADelete the state before running Terraform.
    • BRefresh the state after running Terraform.
    • CRun Terraform with parallelism set to 1.
    • DConfigure state locking for your state backend.

    Show answer

    Correct answer: D

    How others answered

    • D100%

22. Question 22 of 25

    Which of the following is not a key principle of infrastructure as code?

    • AVersioned infrastructure
    • BGolden images
    • CIdempotence
    • DSelf-describing infrastructure

    Show answer

    Correct answer: B

    How others answered

    • B93%
    • ABD8%

23. Question 23 of 25

    When should you use the force-unlock command?

    • AWhen apply has failed due to a state lock.
    • BWhen automatic unlocking has failed.
    • CWhen you see a status message stating that you cannot acquire the lock.
    • DWhen you have a high priority change.

    Show answer

    Correct answer: B

    How others answered

    • B100%

24. Question 24 of 25

    Terraform variables and outputs that set the "description" argument will store that description in the state file.

    • ATrue
    • BFalse

    Show answer

    Correct answer: B

    How others answered

    • B100%

25. Question 25 of 25

    What is the provider for this fictitious resource?

    

    • Avpc
    • Bmain
    • Caws
    • Dtest

    Show answer

    Correct answer: C

    How others answered

    • C100%

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

TA-003 practice, question 1 of 25