A team asks whether Terraform must continuously run as an agent on every provisioned VM. Which answer is correct?

1. Terraform commonly interacts with provider APIs without per-VM agents
2. All resources must run the same operating system
3. Terraform can manage only servers that expose SSH
4. Every resource needs a Terraform agent inside it