Free HashiCorp Terraform-Associate-004 Practice Exam with Questions & Answers | Set: 8

Detailed Explanation:

Rationale for Correct Answer: Terraform logging is enabled by setting the TF_LOG environment variable. Common values include TRACE, DEBUG, INFO, WARN, and ERROR. For example: export TF_LOG=DEBUG.

Analysis of Incorrect Options (Distractors):

A. Set the log level command-line flag. Incorrect. Terraform does not use a general CLI flag for verbose log level control.

C. Set the log level in your terraform block. Incorrect. Logging is not configured in the Terraform configuration block.

Key Concept: Terraform troubleshooting logs are controlled through environment variables.

The terraform init command is used to initialize a working directory containing Terraform configuration files. This command performs several different initialization steps to prepare the current working directory for use with Terraform, which includes initializing the backend, installing provider plugins, and copying any modules referenced in the configuration. However, it does not validate whether all required variables are present; that is a task performed by terraform plan or terraform apply1.

References = This information can be verified from the official Terraform documentation on the terraform init command provided by HashiCorp Developer1.

Detailed Explanation:

Rationale for Correct Answer: terraform validate checks whether a Terraform configuration is syntactically valid and internally consistent. Therefore, confirming valid Terraform syntax is part of what the command does.

Analysis of Incorrect Options (Distractors):

B: False is incorrect because syntax validation is explicitly one of the command ' s functions. However, remember that terraform validate does more than merely parse syntax; it also performs internal consistency checks.

Key Concept: Static validation of Terraform configuration.

The correct syntax to pass a variable from the root module to a child module isservers = var.num_servers. Terraform uses dot notation to reference variables.

Detailed Explanation:

Rationale for Correct Answer: The resource group is declared as a data source, so its name is referenced with data.azurerm_resource_group.example.name. Appending -vnet creates the required virtual network name. Option A correctly produces a string such as my-resource-group-vnet.

Analysis of Incorrect Options (Distractors):

B. Incorrect. concat() is used to concatenate lists, not strings.

C. Incorrect. join() expects a separator and a list of strings, such as join( " - " , [var.resource_group_name, " vnet " ]). The syntax shown is invalid.

D. Incorrect. This references a managed resource named azurerm_resource_group.example, but the exhibit shows a data source named data.azurerm_resource_group.example.

Key Concept: Referencing data source attributes and using string interpolation/concatenation in Terraform expressions.

The statement that you must use the CLI to switch between workspaces is false. Terraform Cloud workspaces are different from Terraform CLI workspaces. Terraform Cloud workspaces are required and represent all of the collections of infrastructure in an organization. They are also a major component of role-based access in Terraform Cloud. You can grant individual users and user groupspermissions for one or more workspaces that dictate whether they can manage variables, perform runs, etc. You can create, view, and switch between Terraform Cloud workspaces using the Terraform Cloud UI, the Workspaces API, or the Terraform Enterprise Provider5. Terraform CLI workspaces are optional and allow you to create multiple distinct instances of a single configuration within one working directory. They are useful for creating disposable environments for testing or experimenting without affecting your main or production environment. You can create, view, and switch between Terraform CLI workspaces using the terraform workspace command6. The other statements about Terraform Cloud workspaces are true. They have role-based access controls that allow you to assign permissions to users and teams based on their roles and responsibilities. You can create and manage roles using the Teams API or the Terraform Enterprise Provider7. Plans and applies can be triggered via version control system integrations that allow you to link your Terraform Cloud workspaces to your VCS repositories. You can configure VCS settings, webhooks, and branch tracking to automate your Terraform Cloud workflow8. They can securely store cloud credentials as sensitive variables that are encrypted at rest and only decrypted when needed. You can manage variables using the Terraform Cloud UI, the Variables API, or the Terraform Enterprise Provider9. References = [Workspaces]5, [Terraform CLI Workspaces] 6, [Teams and Organizations]7, [VCS Integration] 8, [Variables]9

Rationale for Correct Answer: terraform plan -destroy does not destroy anything. It only creates a plan that proposes destroying all managed resources. Actual destruction happens only when you run terraform destroy or terraform apply with an approved destroy plan.

Analysis of Incorrect Options (Distractors):

A: Does trigger destruction (interactive approval by default).

B: Incorrect because terraform plan -destroy does not perform destruction.

D: Does trigger destruction and skips the interactive approval prompt.

Key Concept: Difference between planning a destroy and executing a destroy.

Sentinel is a policy-as-code framework that integrates with Terraform Cloud to enforce security, compliance, and governance rules. You can enforce rules such as approved AMIs and ensure security best practices. Policies are written in the Sentinel language, not HCL.

Detailed Explanation:

Rationale for Correct Answer:Module input variables are set by providing arguments in the module block whose names match the module’s declared variables. Since the module expects servers, you pass it directly as servers = 3. This is the standard Terraform module input pattern.

Analysis of Incorrect Options (Distractors):

A: Incorrect. var.servers is how you reference an input variable in expressions, not how you assign a module input. Module inputs are set as arguments, not through the var. namespace.

B: Incorrect. Terraform module blocks do not use an inputs = { ... } argument (that pattern is common in some other tools, but not Terraform).

D: Incorrect. inputs.servers is not valid HCL syntax for setting module input arguments.

Key Concept:Passing input variables to modules by setting arguments on the module block.

 Terraform configuration (including any module references) can contain more than one Terraform provider type. Terraform providers are plugins that Terraform uses to interact with various cloud services and other APIs. A Terraform configuration can use multiple providers to manage resources across different platforms and services. For example, a configuration can use the AWS provider to create a virtual machine, the Cloudflare provider to manage DNS records, and the GitHub provider to create a repository. Terraform supports hundreds of providers for different use cases and scenarios. References = [Providers], [Provider Requirements] , [Provider Configuration]