HashiCorp Certified: Terraform Associate (004) - Blueprint Practice Exam 1

Suggested duration: 48 minutes

Exam code: 004

By Oleksandr Andrushchenko — Published on

40 questions ยท Free

Start exam

40 original practice questions aligned to the current exam outline, with explanations for every option. Fixed-length choice-based practice; official exam length, adaptive delivery, labs and scaled scoring are not reproduced.

Questions — 40

  1. A child module declares variable region. How does it receive a value from its parent?
  2. A child module needs an aliased provider supplied by its caller. What must the configuration support?
  3. A cloud provider supports short-lived workload identity for HCP Terraform. Why prefer it to a long-lived static secret?
  4. A company groups related HCP Terraform workspaces for administration. Which construct supports this organization?
  5. A configuration has an invalid reference to an undeclared variable. Which command checks configuration consistency without applying changes?
  6. A configuration must use compatible versions of the AWS provider. Where should its version constraint be declared?
  7. A configuration needs the same provider for two regions. What is the appropriate mechanism?
  8. A data block looks up an existing VPC. How does it differ from a resource block managing that VPC?
  9. A developer adds a new provider dependency. Which command normally installs it into the working directory?
  10. A developer proposes terraform destroy in a shared production workspace for testing. What should be assessed first?
  11. A local reusable network module needs different subnet ranges in development and production. What is the best interface?
  12. A parent needs a resource ID created inside a child module. What should the child expose?
  13. A password variable is marked sensitive. Which statement is correct?
  14. A policy must prevent unapproved infrastructure from applying across teams. Which HCP Terraform feature is relevant?
  15. A production workspace should plan on version-control changes but require approval before apply. What should be configured?
  16. A project provisions both AWS resources and a DNS service. How does Terraform support this?
  17. A remote backend supports encryption, authentication and locking. What is still important?
  18. A resource argument references another resource's id. What normally follows for dependency ordering?
  19. A resource block is renamed while its remote object should remain. Which feature documents the address transition in configuration?
  20. A resource set uses stable business identifiers as keys and changes frequently. Why might for_each be preferable to count?
  21. A reviewed change should replace one degraded resource instance. Which modern planning option expresses that intent?
  22. A state lock appears stuck after a failed process. What should happen before force-unlock?
  23. A team asks whether Terraform must continuously run as an agent on every provisioned VM. Which answer is correct?
  24. A team consumes a registry module and wants controlled upgrades. What should it configure?
  25. A team manually creates identical networks in three environments and configurations drift. Which Terraform benefit best addresses this?
  26. A team saves a plan using terraform plan -out=reviewed.tfplan. How should it apply that exact plan?
  27. A team wants centrally executed plans and shared access controls. Which service capability is relevant?
  28. A team wants Terraform to manage an existing cloud object without creating another. Which workflow fits?
  29. An engineer describes infrastructure using desired resource attributes instead of individual creation commands. What approach is this?
  30. An input string must be one of dev, staging or prod. Which configuration feature best checks this early?
  31. An operator changes a managed instance outside Terraform. What is this called?
  32. An operator runs terraform fmt. What should they expect?
  33. An organization changes a backend from local to remote storage. Which action supports moving existing state?
  34. Debug logs are needed for a failed provider operation. What precaution is essential?
  35. Two operators may apply changes against the same remote state. Which backend capability helps prevent conflicting writes?
  36. What does the .terraform.lock.hcl file primarily record?
  37. Which command lists resource addresses currently tracked in the selected Terraform state?
  38. Which workflow best supports reviewing proposed changes before modifying infrastructure?
  39. Why does Terraform state store remote resource identifiers?
  40. Why should infrastructure code changes be reviewed before apply?

Comments — 0

Related exams