Free HashiCorp Terraform-Associate-004 Practice Exam with Questions & Answers | Set: 9

Detailed Explanation:

Rationale for Correct Answer: In Terraform, when a parent module needs access to a value from a child module, that value must be exposed through an output block in the child module. For example, the child module could define an output that returns aws_instance.example.public_ip. The parent module can then reference that value using module. < module_name > . < output_name > . This is the standard Terraform mechanism for passing resource attributes from a child module to its parent. ✔️

Analysis of Incorrect Options (Distractors):

A. Create a local value in the child module. Incorrect because locals are only available inside the same module. They help simplify expressions, but they do not expose values to a parent module.

C. Add a data source to the parent module. Incorrect because data sources are used to read information about existing infrastructure, not to export values from a child module.

D. Add an import block to the parent module. Incorrect because an import block is used to bring existing infrastructure under Terraform management. It does not provide access to attributes from a child module resource.

Key Concept: Child modules expose values to parent modules by using output values.

These are the parameters that terraform import requires, as they allow Terraform to identify the existing resource that you want to import into your state file, and match it with the corresponding configuration block in your files.

Rationale for Correct Answer:Terraform detects drift by refreshing state during terraform apply. Since the VM no longer exists but is still declared in configuration, Terraform will plan and recreate the missing resource.

Analysis of Incorrect Options (Distractors):

B. Error: Terraform treats this as drift, not an error.

C. Remove from state: Terraform does not remove resources automatically unless instructed.

D. No changes: Incorrect because drift is detected and corrected.

Key Concept:Terraform enforces the desired state defined in configuration, correcting drift automatically.

Terraform state is a representation of the infrastructure that Terraform manages. Terraform uses state to track the current status of the resources it creates and to plan future changes. However, Terraform state is not aware of any changes made to the resources outside of Terraform, such as through the Azure Cloud Console, the Azure CLI, or the Azure API. Therefore, changing resources via the Azure Cloud Console does not update the current state file, and it may cause inconsistencies or conflicts with Terraform’s desired configuration. To avoid this, it is recommended to manage resources exclusively through Terraform or to use the terraform import command to bring existing resources under Terraform’s control.

When you change a Terraform-managed resource via the Azure Cloud Console, Terraform does not immediately update the state file to reflect the change. However, the next time you run terraform plan or terraform apply, Terraform will compare the state file with the actual state of the resources in Azure and detect any drifts or differences. Terraform will then update the state file to match the current state of the resources and show you the proposed changes in the execution plan. Depending on the configuration and the change, Terraform may try to undo the change, modify the resource further, or recreate the resource entirely. To avoid unexpected or destructive changes, it is recommended to review the execution plan carefully before applying it or to use the terraform refresh command to update the state file without applying any changes.

References = Purpose of Terraform State, Terraform State, Managing State, Importing Infrastructure, [Command: plan], [Command: apply] , [Command: refresh]

This is how Terraform determines dependencies between resources, by using the references between them in the configuration files and other factors that affect the order of operations.

This is the best way to delete the newly-created VM with Terraform, as it will only affect the resource that was created by your configuration and state file. The other options are either incorrect or inefficient.

Detailed Explanation:Rationale for Correct Answer:When using multiple configurations of the same provider (e.g., AWS in different regions), Terraform requires the use of an aliasto distinguishalias argument:provider " aws " { alias = " west " region = " us-west-2 " }This allows resources to explicitly reference the aliased provider using:provider = aws.westThis is the standard Terraform pattern for multi-region or multi-account deployments.Analysis of Incorrect Options (Distractors):

Answer: Resource block only — Incorrect because it does not define how to use a different region; it relies on provider configuration.

Answer: provider " aws " " west " — Incorrect syntax; Terraform does not support naming providers this way. The correct method is using the alias argument.

Answer: provider " aws_west " — Incorrect because provider names must match actual providers (e.g., aws). You cannot invent a new provider name. Key Concept:Provider aliasing enables multiple configurations of the same provider (e.g., multiple AWS regions).

Rationale for Correct Answer: terraform apply -replace=ADDRESS forces Terraform to replace the specified resource during the next apply, meaning it will plan to destroy and then recreate it (or create-before-destroy if the resource supports it and the graph/lifecycle allows). This is used when a resource is unhealthy, drifted in a way that’s hard to correct, or you want a fresh instance without changing configuration.

Analysis of Incorrect Options (Distractors):

A: Incorrect—-replace is not “destroy only”; it’s destroy + recreate.

B: Incorrect—ignoring changes is done with lifecycle ignore_changes, not -replace.

D: Incorrect—destroying everything is terraform destroy (or apply with all resources removed), not -replace.

Key Concept: Forcing resource replacement using -replace in the apply workflow.

Child modulesdo not automatically inheritvariables from the parent module.

To pass values from theparent moduleto thechild module, you mustexplicitly define input variablesin the child module and pass them in the parent module.

Example:

hcl

CopyEdit

module " example " {

source = " ./child_module "

var1 = " value "

}

Official Terraform Documentation Reference:

Passing Variables to Modules

Detailed Explanation:

Rationale for Correct Answer:Setting version = " 3.1.4 " pins the module to that exact version, preventing Terraform from selecting any newer version. This is the strongest guard against unexpected changes (including potential breaking changes) because it does not allow upgrades unless you explicitly change the version constraint.

Analysis of Incorrect Options (Distractors):

A: Incorrect. This allows any version < 3.2 (including 3.1.5, 3.1.9, etc.). Those may still introduce behavioral changes you want to avoid.

B: Incorrect. This forces Terraform to use 3.1.5 or newer, the opposite of what you want.

D: Incorrect. ~ > 3.1.4 allows patch-level updates (e.g., 3.1.5, 3.1.9) and could still introduce changes your team wants to avoid.

Key Concept:Module version constraints and pinning to avoid unexpected upgrades.