Free Practice Questions for HashiCorp Terraform-Associate-004 Exam

If you update the version constraint in your Terraform configuration, Terraform will update your lock file the next time you run terraform init3. This will ensure that you use the same provider versions across different machines and runs.

These are examples of infrastructure as code (IaC), which is a practice of managing and provisioning infrastructure through machine-readable definition files, rather than physical hardware configuration or interactive configuration tools.

Rationale for Correct Answer: Marking a variable (or output) as sensitive = true primarily prevents Terraform from displaying the value in CLI output and in some UI contexts. It does not prevent the value from being stored in the state file if that value is used by resources. Terraform state must often store attribute values to track and manage infrastructure; sensitive marking is about redaction, not state omission.

Analysis of Incorrect Options (Distractors):

A (True): Incorrect—sensitive values can still be written to state; you must protect state storage (encryption, access control) and avoid storing secrets in state where possible.

Key Concept: Sensitive values are redacted in output, but still can exist in state.

This command will initialize the new backend and prompt you to migrate the existing state file to the new location4. The other commands are not relevant for this task.

It lets you version, reuse, and share infrastructure configuration as code files, which can be stored in a source control system and integrated with your CI/CD pipeline.

It reduces risk of operator error by automating repetitive tasks and ensuring consistency across environments. IaC does not necessarily provision resources at a lower cost, secure your credentials, or prevent manual modifications to your resources - these depend on other factors such as your cloud provider, your security practices, and your access policies.

Rationale for Correct Answer:terraform init initializes backends, downloads providers, and retrieves modules — but it does not generate or create configuration files.

Analysis of Incorrect Options (Distractors):

A: Correct action performed by terraform init.

C: Providers are downloaded during initialization.

D: Module source code is fetched during initialization.

Key Concept:terraform init prepares the working directory but does not create configuration.

Module variable assignments are not inherited from the parent module and you need to explicitly set them using the source argument. This allows you to customize the behavior of each module instance.

Detailed Explanation:

Rationale for Correct Answer:The lifecycle argument create_before_destroy = true ensures that Terraform creates the new resource first before destroying the old one. This minimizes or eliminates downtime, which is critical for high-availability systems. This directly aligns with Terraform best practices for managing resource replacement scenarios.

Analysis of Incorrect Options (Distractors):

A. prevent_destroy = true — Incorrect because it prevents Terraform from destroying the resource entirely, which would block the update rather than enable it.

B. ignore_changes = all — Incorrect because it tells Terraform to ignore changes to the resource, meaning the update would not be applied at all.

D. destroy = false — Incorrect because this is not a valid lifecycle argument in Terraform.

Key Concept:Lifecycle meta-arguments, specifically create_before_destroy, help control how Terraform handles resource replacement and minimize downtime.

This command will check if all code in a Terraform configuration that references multiple modules is properly formatted without making changes, and will return a non-zero exit code if any files need formatting. The other commands will either make changes, list the files that need formatting, or not check the modules.

Detailed Explanation:

Rationale for Correct Answer:Refactoring (like moving resources into a module) changes resource addresses. Terraform will plan destroy/create unless it knows the resources were moved. The supported mechanism is a moved block, which tells Terraform how to map the old address to the new address so it updates state without recreating resources.

Analysis of Incorrect Options (Distractors):

B: Incorrect. terraform console is for evaluating expressions and inspecting values; it is not a supported state editor.

C: Incorrect. Manually editing terraform.tfstate is unsafe and not the recommended/supported approach (risk of corruption and subtle errors).

D: Incorrect. Renaming resources in a cloud console does not update Terraform state addresses and usually doesn’t solve Terraform address refactors.

Key Concept:State-aware refactoring using moved blocks to preserve resources while changing their addresses.