Free HashiCorp Terraform-Associate-004 Practice Exam with Questions & Answers | Set: 2

You need to write Terraform configuration files for the existing infrastructure that you want to import into Terraform, otherwise Terraform will not know how to manage it. The configuration files should match the type and name of the resources that you want to import.

Detailed Explanation:

Rationale for Correct Answer: AWS CloudFormation is a service specifically designed to provision and manage infrastructure within AWS only. It does not support multi-cloud environments such as Microsoft Azure. Therefore, attempting to deploy infrastructure into Azure using CloudFormation presents a clear limitation and challenge. This aligns with Terraform’s core value proposition: multi-cloud and provider-agnostic infrastructure management, which overcomes this limitation.

Analysis of Incorrect Options (Distractors):

A. Building a reusable codebase that can deploy resources into any AWS region. Incorrect because CloudFormation supports reusable templates and can deploy across AWS regions without issue.

B. Managing a new application stack built on AWS-native services. Incorrect because CloudFormation is purpose-built for AWS-native services and handles this scenario effectively.

D. Automating a manual, web console-based provisioning process. Incorrect because CloudFormation is specifically designed to automate infrastructure provisioning, replacing manual console operations.

Key Concept: Cloud-specific vs multi-cloud Infrastructure as Code tools — Terraform supports multiple providers, whereas CloudFormation is AWS-only.

D

Rationale for Correct Answer:A check block in Terraform is used to validate conditions and provide warnings or errors, but it does not block the execution of the operation by default. Failed checks will report issues, but Terraform continues execution unless explicitly configured otherwise. Therefore, the statement is false.

Analysis of Incorrect Options (Distractors):

A. True — Incorrect because checkwith*

Key Concept:Check blocks are used for validation and observability but do not enforce execution blocking like preconditions or postconditions.

In Terraform, the correct way to reference a resource attribute is:

pgsql

CopyEdit

resource_type.resource_name.attribute

For example, if the resource block is:

hcl

CopyEdit

resource " kubernetes_namespace " " example " {

metadata {

name = " my-namespace "

}

}

To reference the name attribute, use:

pgsql

CopyEdit

kubernetes_namespace.example.name

Explanation of incorrect answers:

A (resource.kubernetes_namespace.example.name)– Incorrect. Terraform does not use the resource. prefix when referencing resources.

C (data.kubernetes.namespace.name)– Incorrect. This syntax is used fordata sources, not resources.

D (kubernetes_namespace.test.name)– Incorrect. The resource name is " example " , not " test " .

Official Terraform Documentation Reference:

Terraform Resource References

This is the command that lets you experiment with Terraform expressions, by providing an interactive console that allows you to evaluate expressions and see their results. You can use this command to test your expressions before using them in your configuration files.

Detailed Explanation:

Rationale for Correct Answer: Terraform state files (terraform.tfstate) can store sensitive data in plain text, including attributes such as passwords, private keys, API tokens, and other secrets returned by providers. Because of this, HashiCorp recommends securing state files using encryption, access controls, and remote backends (like S3 with encryption or Terraform Cloud). Protecting the state file is a critical part of state management and security in Terraform.

Analysis of Incorrect Options (Distractors):

B. It stores all environment variables from the machine that created it. Incorrect because Terraform state does not capture environment variables; it only tracks resource attributes and metadata.

C. It can be manually edited to change the deployed resources. Incorrect because while the state file can technically be edited, this is not the reason it is considered sensitive. Also, manual edits are discouraged and risky.

D. It contains personal information about the last user to update it. Incorrect because Terraform state does not store personal user data.

Key Concept: Terraform state files may contain sensitive infrastructure data and secrets, requiring secure storage and access control.

Detailed Explanation:

Rationale for Correct Answer: terraform destroy destroys all resources managed by the current configuration, but it is not the only way to remove infrastructure. You can also remove a resource block from the configuration and run terraform apply; Terraform will then plan to destroy that specific resource because it is no longer declared.

Analysis of Incorrect Options (Distractors):

A. True. Incorrect. Terraform can destroy infrastructure through normal apply operations when resources are removed from configuration.

Key Concept: Terraform reconciles real infrastructure with configuration. Removing a resource from configuration and applying the change can destroy that resource.

Terraform follows adeclarativeapproach, meaning it ensures the infrastructure matches the configuration.

If you run terraform apply againwithout any changes, Terraform willdetect that the infrastructure is already up to dateand willdo nothing.

The command will complete successfully with the message " No changes. Your infrastructure matches the configuration. "

Official Terraform Documentation Reference:

Terraform Apply - HashiCorp Documentation

Terraform workspaces allow you to create multiple states but still be associated with your current code. Workspaces are like “environments” (e.g. staging, production) for the same configuration. You can use workspaces to spin up a copy of your production deployment for testing purposes without having to configure a new state backend. Terraform data sources, local values, and modules are not features that allow you to create multiple states. References = Workspaces and How to Use Terraform Workspaces

To output returned values from a child module in the Terraform CLI output, you need to declare the output in both the child module and the root module. The child module output will return the value to the root module, and the root module output will display the value in the CLI. References = [Terraform Outputs]