Free HashiCorp Terraform-Associate-004 Practice Exam with Questions & Answers | Set: 6

Setting the TF_LOG environment variable to DEBUG causes debug messages to be logged into stdout, along with other log levels such as TRACE, INFO, WARN, and ERROR. This can be useful for troubleshooting or debugging purposes.

Detailed Explanation:

Rationale for Correct Answer: Infrastructure as Code (IaC) focuses on defining and managing infrastructure using configuration files and automation, rather than manual processes. While IaC provides benefits like automation, reusability, and version control, it does not inherently provide a GUI. In fact, IaC is typically CLI-driven and code-centric, which is the opposite of relying on graphical interfaces.

Analysis of Incorrect Options (Distractors):

A. Reusability of code Incorrect because IaC enables reusable modules and templates, which is a key benefit.

B. Automation Incorrect because IaC automates infrastructure provisioning and management.

D. Versioning Incorrect because IaC configurations can be stored in version control systems (e.g., Git), enabling tracking and rollback.

Key Concept: IaC emphasizes automation, consistency, reusability, and version control, not graphical interfaces.

terraform validate does not confirm that your infrastructure matches the Terraform state file. It only checks whether the configuration files in a directory are syntactically valid and internally consistent3. To confirm that your infrastructure matches the Terraform state file, you need to use terraform plan or terraform apply with the -refresh-only option.

A module cannot always refer to all variables declared in its parent module, as it needs to explicitly declare input variables and assign values to them from the parent module’s arguments. A module cannot access the parent module’s variables directly, unless they are passed as input arguments.

Terraform detects infrastructure drift by comparing thestate filewith the actual infrastructure.

When an instance ismanually deleted, Terraformsees it as missingand marks it for recreation.

Running terraform apply willonly recreate the missing instanceswhile leaving the rest of the infrastructure unchanged.

Explanation of incorrect answers:

A (Tear down everything and rebuild)– Incorrect. Terraform does not destroy existing infrastructure unless explicitly told to.

B (Build a completely new set of infrastructure)– Incorrect. Terraform does not create duplicates unless configuration changes.

D (Stop and error out)– Incorrect. Terraform does not fail; itrebuilds missing resourcesautomatically.

Official Terraform Documentation Reference:

Handling Infrastructure Drift

terraform init is the first command that should be run after writing a new Terraform configuration or cloning an existing one from version control. It initializes a working directory containing Terraform configuration files and downloads any required providers and modules. The other commands are used for different purposes, such as importing existing resources, switching between workspaces, generating execution plans, etc.

Rationale for Correct Answer: terraform state rm < address > removes a resource from Terraform state without destroying the real infrastructure. After removal, Terraform “forgets” it and will no longer manage it (unless it’s re-imported). That matches the requirement: keep the resource, stop managing it.

Analysis of Incorrect Options (Distractors):

A: Removing the resource block causes Terraform to plan to destroy the resource (because it’s in state but no longer in config), which is the opposite of “keep it.”

B: Changing count can cause Terraform to destroy instances that no longer have an address (depending on indexing), and it doesn’t explicitly “stop managing” a specific existing instance safely.

D: moved blocks are for renaming/refactoring addresses while keeping management; they do not stop managing a resource.

Key Concept: Detaching resources from Terraform management using state subcommands (terraform state rm).

Terraform can manage resource dependencies implicitly or explicitly. Implicit dependencies are created when a resource references another resource or data source in its arguments. Terraform can infer the dependency from the reference and create or destroy the resources in the correct order. Explicit dependencies are created when you use the depends_on argument to specify that a resource depends on another resource or module. This is useful when Terraform cannot infer the dependency from the configuration or when you need to create a dependency for some reason outside of Terraform’s scope. References = : Create resource dependencies : Terraform Resource Dependencies Explained

Rationale for Correct Answer: AWS CloudFormation is AWS-specific. If your standardized provisioning tool is CloudFormation, deploying infrastructure into Microsoft Azure becomes a challenge because CloudFormation does not natively provision Azure resources. This highlights a core IaC concept: tool/platform scope and portability across clouds.

Analysis of Incorrect Options (Distractors):

A (Reusable code base for any AWS region): CloudFormation templates are commonly reusable across AWS regions; region differences are typically handled via parameters, mappings, and region-specific resource availability—not a fundamental challenge.

B (Managing a new stack on AWS-native services): This is CloudFormation’s strength: managing AWS-native services with declarative templates and stack updates.

C (Automating manual console provisioning): Another core use case for IaC—CloudFormation is designed to replace manual provisioning with repeatable automation.

Key Concept: IaC tool scope and portability—AWS CloudFormation is tightly coupled to AWS, limiting multi-cloud provisioning.

Rationale for Correct Answer: A resource block creates/updates/destroys an infrastructure object and contains the configuration settings for that managed object (e.g., a VM, bucket, network). This is how Terraform manages real infrastructure.

Analysis of Incorrect Options (Distractors):

B (provider): Configures how Terraform connects to an API (region, credentials), not an infrastructure object.

C (data): Reads existing infrastructure; it does not manage (create/update/destroy) it.

D (locals): Defines named expressions for reuse; it doesn’t manage infrastructure.

Key Concept: Managed infrastructure is defined with resource blocks.