AWS provider Resource Lifecycle Management — All Questions With Answers

Question 1mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You need to ensure that an AWS Auto Scaling Group maintains capacity during a configuration change that requires a new launch template. Which lifecycle meta-argument should you use?

Question 2hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You have an AWS Lambda function that should be replaced whenever the source code S3 object changes. How do you trigger this replacement specifically based on the S3 object key change?

Question 3mediummultiple choice

Read the full Resource Lifecycle Management explanation →

What is the purpose of the 'terraform state refresh' command?

Question 4hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You need to ignore changes to a specific index in a list of security group rules. How is this formatted in 'ignore_changes'?

Question 5easymultiple choice

Read the full Resource Lifecycle Management explanation →

Which meta-argument is used to prevent a resource from being replaced when its configuration changes?

Question 6hardmultiple choice

Read the full Resource Lifecycle Management explanation →

When using 'replace_triggered_by', what happens if the referenced resource is deleted?

Question 7mediummulti select

Read the full Resource Lifecycle Management explanation →

Which THREE of the following are valid lifecycle meta-arguments?

Question 8mediummulti select

Read the full Resource Lifecycle Management explanation →

Which THREE of these are reasons to use the 'ignore_changes' lifecycle meta-argument?

Question 9mediummultiple choice

Review the full subnetting walkthrough →

You manage an AWS RDS instance with Terraform. The DB subnet group attached to the instance must be replaced whenever the underlying private subnets change, but you want to avoid unnecessary replacements when only the RDS instance's own attributes change. Which lifecycle meta-argument should you use to trigger replacement based on the subnet IDs?

Question 10mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You manage an AWS RDS instance in Terraform. A new security policy requires that the instance's storage be encrypted. You modify the Terraform configuration to set `storage_encrypted = true` and run `terraform apply`. The apply fails with an error indicating that the attribute cannot be modified. What is the most likely cause and correct action?

Question 11hardmulti select

Read the full Resource Lifecycle Management explanation →

You are using Terraform to manage an Auto Scaling group (ASG) and its launch configuration. The launch configuration is immutable, so any change to its attributes requires a new launch configuration and an update to the ASG. You want to ensure that the ASG is updated to use the new launch configuration without downtime. Which two lifecycle meta-arguments should you use together to achieve this? (Choose two.)

Question 12mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You manage an AWS RDS instance defined with the aws_db_instance resource. A junior engineer manually changed the instance class via the AWS CLI. Your team wants the next terraform apply to revert this change automatically, but you also want to avoid Terraform trying to modify the storage_type attribute because it is managed by a separate automation. Which configuration should you use in the lifecycle block of the aws_db_instance resource?

Question 13hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You have an AWS Auto Scaling group managed by Terraform. A lifecycle hook is configured to keep instances in a terminating:wait state. You need Terraform to destroy the group and its instances without hanging indefinitely, but you must still allow the hook to run for normal scaling events. What should you configure?

Question 14hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You have a Terraform configuration that manages an AWS Auto Scaling group. You need to ensure that the group is replaced only when a specific launch template version changes, but not when other attributes change. Which approach achieves this?

Question 15mediummultiple choice

Review the full routing breakdown →

A platform team manages an aws_db_instance with lifecycle { create_before_destroy = true } in its resource block. During a routine apply, Terraform must replace the database because an immutable attribute changed. The team observes that the new instance is created before the old one is destroyed, but the apply then fails when Terraform attempts to modify a dependent aws_route53_record. What is the most likely cause of this failure?

Question 16mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You manage an Amazon RDS DB instance declared with the aws_db_instance resource. Your team's compliance policy requires that the production database can never be destroyed by a terraform apply, but developers still need to be able to run terraform destroy on ephemeral staging stacks from the same configuration. Which approach best satisfies this requirement?

Question 17mediummulti select

Read the full Resource Lifecycle Management explanation →

You are using Terraform to manage an AWS S3 bucket. You need to ensure that the bucket is not destroyed by a `terraform destroy` command, and you also want to prevent accidental deletion if the resource is removed from the configuration. Which two actions should you take? (Choose two.)

Question 18mediummulti select

Read the full Resource Lifecycle Management explanation →

You are managing a fleet of `aws_instance` resources with Terraform. You want a specific instance to be replaced whenever the value of an `aws_ami` data source changes, without changing any other attribute of the instance. Which two actions are required to achieve this? (Choose two.)

Question 19hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You are managing a set of AWS resources with Terraform, including an S3 bucket and an S3 bucket policy. The bucket policy depends on the bucket's ARN. You need to ensure that whenever the bucket's ARN changes, the bucket policy is replaced. However, you also want to avoid unnecessary replacements if other attributes of the bucket change. Which configuration should you use for the aws_s3_bucket_policy resource?

Question 20mediummulti select

Read the full Resource Lifecycle Management explanation →

You are using Terraform to manage an AWS S3 bucket and its objects. You need to ensure that the bucket is not destroyed if it contains objects, but you also want to allow Terraform to delete individual objects when they are removed from configuration. Which TWO configurations should you implement? (Choose two.)

Question 21hardmulti select

Read the full Resource Lifecycle Management explanation →

An operations engineer is auditing a Terraform configuration that uses the lifecycle block on several AWS resources. The team wants to prevent accidental deletion of a production RDS cluster while still allowing the configuration to be updated in place. They also want to ensure that an S3 bucket is never destroyed during routine applies but can be destroyed during an intentional teardown. Which TWO lifecycle configurations satisfy these requirements? (Choose two.)

Question 22easymultiple choice

Read the full Resource Lifecycle Management explanation →

You are writing a Terraform configuration for an AWS EC2 instance. You want to ensure that the instance is replaced if its AMI ID changes, but you do not want to manage the AMI ID directly in the resource block. Which approach should you use?

Question 23easymultiple choice

Read the full Resource Lifecycle Management explanation →

A platform team stores the AMI ID for a fleet of aws_instance resources in a variable that is updated by an external image-build pipeline. When the pipeline publishes a new AMI and updates the variable, the team wants every instance to be rebuilt on the next apply. The instances currently use lifecycle { create_before_destroy = true }. What must be added to guarantee replacement when the variable changes?

Question 24hardmultiple choice

Read the full Resource Lifecycle Management explanation →

A team maintains an aws_autoscaling_group whose desired_capacity is set from a variable. They want Terraform to ignore changes to desired_capacity made by an external auto-scaling policy, but they still want Terraform to manage launch_template and min_size. They add ignore_changes = [desired_capacity] to the lifecycle block. During the next plan, Terraform still shows a diff on desired_capacity. What is the most likely explanation?

Question 25hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You have a Terraform configuration that creates an AWS Lambda function. The function's deployment package is stored in an S3 bucket, and the S3 object is updated by a separate CI/CD pipeline outside Terraform. You want Terraform to redeploy the Lambda function whenever the S3 object's ETag changes, without managing the S3 object in the same configuration. What should you do?

Question 26mediummultiple choice

Read the full Resource Lifecycle Management explanation →

An engineer is preparing a Terraform configuration that creates an aws_instance and an aws_eip. The EIP must be associated with the instance, but the instance may be replaced during updates. The team wants the EIP association to be recreated whenever the instance changes, without manually tracking instance IDs. Which configuration approach best achieves this?

Question 27hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You are managing an AWS Lambda function with Terraform. The function's deployment package is stored in an S3 bucket, and the aws_lambda_function resource uses the s3_bucket and s3_key arguments. A separate CI/CD pipeline updates the S3 object with a new version of the code. You want Terraform to automatically detect the new code and update the Lambda function during the next apply, without manually changing the configuration. Which approach should you take?

Question 28mediummulti select

Read the full Resource Lifecycle Management explanation →

You are managing an AWS Auto Scaling group with Terraform. You have configured a lifecycle hook that puts instances into a terminating:wait state. You need to ensure that Terraform can successfully destroy the Auto Scaling group without getting stuck due to instances waiting in the lifecycle hook. Which two actions should you take? (Choose two.)

Question 29mediummultiple choice

Read the full Resource Lifecycle Management explanation →

When using 'create_before_destroy', what is a common side effect that may cause the plan to fail?

Question 30hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You are managing a production database instance. You want to ensure that if a developer accidentally removes the resource block from the Terraform configuration, Terraform will refuse to destroy the database. How do you implement this?

Question 31easymultiple choice

Read the full Resource Lifecycle Management explanation →

Which command is used to move a resource from one state file to another, commonly used when refactoring modules?

Question 32mediummultiple choice

Read the full Resource Lifecycle Management explanation →

A resource has an attribute 'tags' that is managed by an external script. You want Terraform to ignore any changes made to 'tags' after the initial creation. How should you configure the 'lifecycle' block?

Question 33mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You have defined a resource and set 'prevent_destroy = true'. If you perform a 'terraform destroy', what will happen?

Question 34hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You want to remove a resource from Terraform management without destroying the actual AWS resource. Which command accomplishes this?

Question 35easymultiple choice

Read the full Resource Lifecycle Management explanation →

Where are lifecycle meta-arguments placed within a Terraform configuration?

Question 36easymultiple choice

Read the full Resource Lifecycle Management explanation →

Which of the following is a valid lifecycle meta-argument in Terraform?

Question 37mediummultiple choice

Read the full Resource Lifecycle Management explanation →

If you use 'ignore_changes = [tags]', and you manually change the tags in the AWS Console, what will happen during the next 'terraform plan'?

Question 38mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You need to ensure that a resource is always recreated if an associated data source value changes. Which meta-argument supports this?

Question 39hardmultiple choice

Read the full Resource Lifecycle Management explanation →

What happens if you set 'ignore_changes = all' in a resource lifecycle block?

Question 40hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You have two resources, A and B. You want B to be replaced whenever A is updated. How do you configure B?

Question 41hardmultiple choice

Read the full Resource Lifecycle Management explanation →

Why might someone use 'prevent_destroy = true' on a database resource while allowing it on smaller web server instances?

Question 42mediummultiple choice

Read the full Resource Lifecycle Management explanation →

When refactoring code, you rename a resource in your configuration. What happens if you run 'terraform plan' without updating the state?

Question 43easymultiple choice

Read the full Resource Lifecycle Management explanation →

Which file stores the mapping between your Terraform configuration and the real-world infrastructure?

Question 44mediummultiple choice

Read the full Resource Lifecycle Management explanation →

What is the primary risk of relying solely on 'create_before_destroy' without considering dependency chains?

Question 45mediummultiple choice

Read the full Resource Lifecycle Management explanation →

When a resource is marked as 'tainted', what is the expected outcome of the next 'terraform apply'?

Question 46mediummultiple choice

Read the full Resource Lifecycle Management explanation →

If a user wants to ensure that a resource's lifecycle is managed by Terraform but wants to bypass the 'prevent_destroy' protection, what is the best approach?

Question 47mediummulti select

Read the full Resource Lifecycle Management explanation →

Which THREE of the following are true regarding 'create_before_destroy'?

Question 48hardmulti select

Read the full Resource Lifecycle Management explanation →

Which TWO of the following accurately describe the behavior of 'terraform state rm'?

Question 49mediummulti select

Read the full Resource Lifecycle Management explanation →

Which THREE of the following are consequences of drifting from the Terraform state?

Question 50hardmulti select

Read the full Resource Lifecycle Management explanation →

Which TWO of the following are valid ways to handle a resource that has become 'tainted'?

Question 51hardmulti select

Read the full Resource Lifecycle Management explanation →

Which TWO actions can be taken to resolve issues where a resource must be replaced, but 'prevent_destroy' is enabled?

Question 52hardmulti select

Read the full Resource Lifecycle Management explanation →

Which TWO factors must be considered when using 'replace_triggered_by' with multiple resources?

Question 53mediummulti select

Read the full Resource Lifecycle Management explanation →

Which THREE of the following are true about 'lifecycle' blocks?

Question 54hardmulti select

Read the full Resource Lifecycle Management explanation →

Which TWO of the following are limitations of 'ignore_changes'?

Question 55mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You manage an AWS RDS DB instance with Terraform. During a maintenance window, an operator manually resizes the instance class in the AWS Management Console. You want Terraform to detect this drift on the next plan but NOT automatically revert it, so you can decide later. What should you do?

Question 56mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You manage an Amazon RDS instance with Terraform. During an unrelated deployment, a junior engineer runs `terraform apply` and the instance is unexpectedly destroyed and recreated, causing a brief outage. You need to ensure that future `terraform apply` runs fail before any destructive change can be planned for this database. Which configuration should you add to the `aws_db_instance` resource?

Question 57hardmultiple choice

Read the full Resource Lifecycle Management explanation →

An `aws_instance` resource has `lifecycle { ignore_changes = [ami] }`. A security team updates the AMI ID in the Terraform configuration to a new hardened image. The instance is currently running an older AMI. What does Terraform plan for this resource during the next `terraform apply`?

Question 58mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You are refactoring a Terraform configuration by moving an `aws_s3_bucket` resource into a child module. The bucket already exists and is tracked in state at the root. You want to avoid destroying and recreating the bucket. Which command should you use to update the state address without touching the real infrastructure?

Question 59hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You are managing an AWS S3 bucket with Terraform. The bucket has versioning enabled and contains critical data. You want to ensure that Terraform never destroys the bucket, even if someone runs terraform destroy. Which lifecycle meta-argument should you use?

Question 60easymultiple choice

Read the full Resource Lifecycle Management explanation →

You are using Terraform to manage an AWS EC2 instance. During a planned update, you expect the instance to be destroyed and recreated because of a change to the user_data attribute. However, you want to ensure that the old instance is destroyed only after the new instance is successfully created, to minimize downtime. Which lifecycle meta-argument should you add to the aws_instance resource?

Question 61mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You have an AWS EC2 instance managed by Terraform. The operations team occasionally updates the instance's tags directly in the AWS Console to reflect temporary maintenance status. You want Terraform to ignore these external tag changes and not revert them during the next apply. However, you still want Terraform to manage other attributes of the instance. Which lifecycle meta-argument should you use?

Question 62hardmultiple choice

Read the full Resource Lifecycle Management explanation →

An operations engineer needs to remove an aws_iam_role and its attached aws_iam_role_policy_attachment from Terraform management without deleting the role in AWS, because the role is shared with an external team. The configuration for both resources will also be deleted from the repository. Which command sequence accomplishes this?

Question 63easymultiple choice

Read the full Resource Lifecycle Management explanation →

A teammate accidentally deleted an `aws_security_group` through the AWS Console. The resource is still present in Terraform state, and no configuration changes have been made. What will `terraform plan` report for that resource, and what is the appropriate next step?

Question 64mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You have an AWS Lambda function defined with the aws_lambda_function resource. The function's source code is packaged in an S3 object. You want Terraform to replace the Lambda function whenever the S3 object's ETag changes, indicating a new version of the code. Which configuration should you add to the aws_lambda_function resource?

Question 65hardmultiple choice

Read the full Resource Lifecycle Management explanation →

During a refactor, an engineer renames the Terraform address of an aws_s3_bucket from aws_s3_bucket.logs to aws_s3_bucket.audit_logs in the configuration, keeping every argument identical. The bucket holds production logs. What is the safest way to apply this change without destroying and recreating the bucket?

Question 66easymultiple choice

Read the full Resource Lifecycle Management explanation →

A team is using Terraform to manage an aws_s3_bucket. They want Terraform to ignore any changes made to the bucket's tags outside of Terraform, but they still want Terraform to manage the bucket policy and versioning configuration. Which lifecycle configuration should they add?

Question 67mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You have an aws_instance resource in your Terraform configuration that was created six months ago. The operations team now requires that any future replacement of this instance preserves the existing Elastic Network Interface (ENI) to maintain its private IP address. You add a lifecycle block with create_before_destroy = true to the aws_instance resource. What is the effect of this change when the instance must be replaced?

Question 1mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You need to ensure that an AWS Auto Scaling Group maintains capacity during a configuration change that requires a new launch template. Which lifecycle meta-argument should you use?

Question 2hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You have an AWS Lambda function that should be replaced whenever the source code S3 object changes. How do you trigger this replacement specifically based on the S3 object key change?

Question 3mediummultiple choice

Read the full Resource Lifecycle Management explanation →

What is the purpose of the 'terraform state refresh' command?

Question 4hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You need to ignore changes to a specific index in a list of security group rules. How is this formatted in 'ignore_changes'?

Question 5easymultiple choice

Read the full Resource Lifecycle Management explanation →

Which meta-argument is used to prevent a resource from being replaced when its configuration changes?

Question 6hardmultiple choice

Read the full Resource Lifecycle Management explanation →

When using 'replace_triggered_by', what happens if the referenced resource is deleted?

Question 7mediummulti select

Read the full Resource Lifecycle Management explanation →

Which THREE of the following are valid lifecycle meta-arguments?

Question 8mediummulti select

Read the full Resource Lifecycle Management explanation →

Which THREE of these are reasons to use the 'ignore_changes' lifecycle meta-argument?

Question 9mediummultiple choice

Review the full subnetting walkthrough →

You manage an AWS RDS instance with Terraform. The DB subnet group attached to the instance must be replaced whenever the underlying private subnets change, but you want to avoid unnecessary replacements when only the RDS instance's own attributes change. Which lifecycle meta-argument should you use to trigger replacement based on the subnet IDs?

Question 10mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You manage an AWS RDS instance in Terraform. A new security policy requires that the instance's storage be encrypted. You modify the Terraform configuration to set `storage_encrypted = true` and run `terraform apply`. The apply fails with an error indicating that the attribute cannot be modified. What is the most likely cause and correct action?

Question 11hardmulti select

Read the full Resource Lifecycle Management explanation →

You are using Terraform to manage an Auto Scaling group (ASG) and its launch configuration. The launch configuration is immutable, so any change to its attributes requires a new launch configuration and an update to the ASG. You want to ensure that the ASG is updated to use the new launch configuration without downtime. Which two lifecycle meta-arguments should you use together to achieve this? (Choose two.)

Question 12mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You manage an AWS RDS instance defined with the aws_db_instance resource. A junior engineer manually changed the instance class via the AWS CLI. Your team wants the next terraform apply to revert this change automatically, but you also want to avoid Terraform trying to modify the storage_type attribute because it is managed by a separate automation. Which configuration should you use in the lifecycle block of the aws_db_instance resource?

Question 13hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You have an AWS Auto Scaling group managed by Terraform. A lifecycle hook is configured to keep instances in a terminating:wait state. You need Terraform to destroy the group and its instances without hanging indefinitely, but you must still allow the hook to run for normal scaling events. What should you configure?

Question 14hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You have a Terraform configuration that manages an AWS Auto Scaling group. You need to ensure that the group is replaced only when a specific launch template version changes, but not when other attributes change. Which approach achieves this?

Question 15mediummultiple choice

Review the full routing breakdown →

A platform team manages an aws_db_instance with lifecycle { create_before_destroy = true } in its resource block. During a routine apply, Terraform must replace the database because an immutable attribute changed. The team observes that the new instance is created before the old one is destroyed, but the apply then fails when Terraform attempts to modify a dependent aws_route53_record. What is the most likely cause of this failure?

Question 16mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You manage an Amazon RDS DB instance declared with the aws_db_instance resource. Your team's compliance policy requires that the production database can never be destroyed by a terraform apply, but developers still need to be able to run terraform destroy on ephemeral staging stacks from the same configuration. Which approach best satisfies this requirement?

Question 17mediummulti select

Read the full Resource Lifecycle Management explanation →

You are using Terraform to manage an AWS S3 bucket. You need to ensure that the bucket is not destroyed by a `terraform destroy` command, and you also want to prevent accidental deletion if the resource is removed from the configuration. Which two actions should you take? (Choose two.)

Question 18mediummulti select

Read the full Resource Lifecycle Management explanation →

You are managing a fleet of `aws_instance` resources with Terraform. You want a specific instance to be replaced whenever the value of an `aws_ami` data source changes, without changing any other attribute of the instance. Which two actions are required to achieve this? (Choose two.)

Question 19hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You are managing a set of AWS resources with Terraform, including an S3 bucket and an S3 bucket policy. The bucket policy depends on the bucket's ARN. You need to ensure that whenever the bucket's ARN changes, the bucket policy is replaced. However, you also want to avoid unnecessary replacements if other attributes of the bucket change. Which configuration should you use for the aws_s3_bucket_policy resource?

Question 20mediummulti select

Read the full Resource Lifecycle Management explanation →

You are using Terraform to manage an AWS S3 bucket and its objects. You need to ensure that the bucket is not destroyed if it contains objects, but you also want to allow Terraform to delete individual objects when they are removed from configuration. Which TWO configurations should you implement? (Choose two.)

Question 21hardmulti select

Read the full Resource Lifecycle Management explanation →

An operations engineer is auditing a Terraform configuration that uses the lifecycle block on several AWS resources. The team wants to prevent accidental deletion of a production RDS cluster while still allowing the configuration to be updated in place. They also want to ensure that an S3 bucket is never destroyed during routine applies but can be destroyed during an intentional teardown. Which TWO lifecycle configurations satisfy these requirements? (Choose two.)

Question 22easymultiple choice

Read the full Resource Lifecycle Management explanation →

You are writing a Terraform configuration for an AWS EC2 instance. You want to ensure that the instance is replaced if its AMI ID changes, but you do not want to manage the AMI ID directly in the resource block. Which approach should you use?

Question 23easymultiple choice

Read the full Resource Lifecycle Management explanation →

A platform team stores the AMI ID for a fleet of aws_instance resources in a variable that is updated by an external image-build pipeline. When the pipeline publishes a new AMI and updates the variable, the team wants every instance to be rebuilt on the next apply. The instances currently use lifecycle { create_before_destroy = true }. What must be added to guarantee replacement when the variable changes?

Question 24hardmultiple choice

Read the full Resource Lifecycle Management explanation →

A team maintains an aws_autoscaling_group whose desired_capacity is set from a variable. They want Terraform to ignore changes to desired_capacity made by an external auto-scaling policy, but they still want Terraform to manage launch_template and min_size. They add ignore_changes = [desired_capacity] to the lifecycle block. During the next plan, Terraform still shows a diff on desired_capacity. What is the most likely explanation?

Question 25hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You have a Terraform configuration that creates an AWS Lambda function. The function's deployment package is stored in an S3 bucket, and the S3 object is updated by a separate CI/CD pipeline outside Terraform. You want Terraform to redeploy the Lambda function whenever the S3 object's ETag changes, without managing the S3 object in the same configuration. What should you do?

Question 26mediummultiple choice

Read the full Resource Lifecycle Management explanation →

An engineer is preparing a Terraform configuration that creates an aws_instance and an aws_eip. The EIP must be associated with the instance, but the instance may be replaced during updates. The team wants the EIP association to be recreated whenever the instance changes, without manually tracking instance IDs. Which configuration approach best achieves this?

Question 27hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You are managing an AWS Lambda function with Terraform. The function's deployment package is stored in an S3 bucket, and the aws_lambda_function resource uses the s3_bucket and s3_key arguments. A separate CI/CD pipeline updates the S3 object with a new version of the code. You want Terraform to automatically detect the new code and update the Lambda function during the next apply, without manually changing the configuration. Which approach should you take?

Question 28mediummulti select

Read the full Resource Lifecycle Management explanation →

You are managing an AWS Auto Scaling group with Terraform. You have configured a lifecycle hook that puts instances into a terminating:wait state. You need to ensure that Terraform can successfully destroy the Auto Scaling group without getting stuck due to instances waiting in the lifecycle hook. Which two actions should you take? (Choose two.)

Question 29mediummultiple choice

Read the full Resource Lifecycle Management explanation →

When using 'create_before_destroy', what is a common side effect that may cause the plan to fail?

Question 30hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You are managing a production database instance. You want to ensure that if a developer accidentally removes the resource block from the Terraform configuration, Terraform will refuse to destroy the database. How do you implement this?

Question 31easymultiple choice

Read the full Resource Lifecycle Management explanation →

Which command is used to move a resource from one state file to another, commonly used when refactoring modules?

Question 32mediummultiple choice

Read the full Resource Lifecycle Management explanation →

A resource has an attribute 'tags' that is managed by an external script. You want Terraform to ignore any changes made to 'tags' after the initial creation. How should you configure the 'lifecycle' block?

Question 33mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You have defined a resource and set 'prevent_destroy = true'. If you perform a 'terraform destroy', what will happen?

Question 34hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You want to remove a resource from Terraform management without destroying the actual AWS resource. Which command accomplishes this?

Question 35easymultiple choice

Read the full Resource Lifecycle Management explanation →

Where are lifecycle meta-arguments placed within a Terraform configuration?

Question 36easymultiple choice

Read the full Resource Lifecycle Management explanation →

Which of the following is a valid lifecycle meta-argument in Terraform?

Question 37mediummultiple choice

Read the full Resource Lifecycle Management explanation →

If you use 'ignore_changes = [tags]', and you manually change the tags in the AWS Console, what will happen during the next 'terraform plan'?

Question 38mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You need to ensure that a resource is always recreated if an associated data source value changes. Which meta-argument supports this?

Question 39hardmultiple choice

Read the full Resource Lifecycle Management explanation →

What happens if you set 'ignore_changes = all' in a resource lifecycle block?

Question 40hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You have two resources, A and B. You want B to be replaced whenever A is updated. How do you configure B?

Question 41hardmultiple choice

Read the full Resource Lifecycle Management explanation →

Why might someone use 'prevent_destroy = true' on a database resource while allowing it on smaller web server instances?

Question 42mediummultiple choice

Read the full Resource Lifecycle Management explanation →

When refactoring code, you rename a resource in your configuration. What happens if you run 'terraform plan' without updating the state?

Question 43easymultiple choice

Read the full Resource Lifecycle Management explanation →

Which file stores the mapping between your Terraform configuration and the real-world infrastructure?

Question 44mediummultiple choice

Read the full Resource Lifecycle Management explanation →

What is the primary risk of relying solely on 'create_before_destroy' without considering dependency chains?

Question 45mediummultiple choice

Read the full Resource Lifecycle Management explanation →

When a resource is marked as 'tainted', what is the expected outcome of the next 'terraform apply'?

Question 46mediummultiple choice

Read the full Resource Lifecycle Management explanation →

If a user wants to ensure that a resource's lifecycle is managed by Terraform but wants to bypass the 'prevent_destroy' protection, what is the best approach?

Question 47mediummulti select

Read the full Resource Lifecycle Management explanation →

Which THREE of the following are true regarding 'create_before_destroy'?

Question 48hardmulti select

Read the full Resource Lifecycle Management explanation →

Which TWO of the following accurately describe the behavior of 'terraform state rm'?

Question 49mediummulti select

Read the full Resource Lifecycle Management explanation →

Which THREE of the following are consequences of drifting from the Terraform state?

Question 50hardmulti select

Read the full Resource Lifecycle Management explanation →

Which TWO of the following are valid ways to handle a resource that has become 'tainted'?

Question 51hardmulti select

Read the full Resource Lifecycle Management explanation →

Which TWO actions can be taken to resolve issues where a resource must be replaced, but 'prevent_destroy' is enabled?

Question 52hardmulti select

Read the full Resource Lifecycle Management explanation →

Which TWO factors must be considered when using 'replace_triggered_by' with multiple resources?

Question 53mediummulti select

Read the full Resource Lifecycle Management explanation →

Which THREE of the following are true about 'lifecycle' blocks?

Question 54hardmulti select

Read the full Resource Lifecycle Management explanation →

Which TWO of the following are limitations of 'ignore_changes'?

Question 55mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You manage an AWS RDS DB instance with Terraform. During a maintenance window, an operator manually resizes the instance class in the AWS Management Console. You want Terraform to detect this drift on the next plan but NOT automatically revert it, so you can decide later. What should you do?

Question 56mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You manage an Amazon RDS instance with Terraform. During an unrelated deployment, a junior engineer runs `terraform apply` and the instance is unexpectedly destroyed and recreated, causing a brief outage. You need to ensure that future `terraform apply` runs fail before any destructive change can be planned for this database. Which configuration should you add to the `aws_db_instance` resource?

Question 57hardmultiple choice

Read the full Resource Lifecycle Management explanation →

An `aws_instance` resource has `lifecycle { ignore_changes = [ami] }`. A security team updates the AMI ID in the Terraform configuration to a new hardened image. The instance is currently running an older AMI. What does Terraform plan for this resource during the next `terraform apply`?

Question 58mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You are refactoring a Terraform configuration by moving an `aws_s3_bucket` resource into a child module. The bucket already exists and is tracked in state at the root. You want to avoid destroying and recreating the bucket. Which command should you use to update the state address without touching the real infrastructure?

Question 59hardmultiple choice

Read the full Resource Lifecycle Management explanation →

You are managing an AWS S3 bucket with Terraform. The bucket has versioning enabled and contains critical data. You want to ensure that Terraform never destroys the bucket, even if someone runs terraform destroy. Which lifecycle meta-argument should you use?

Question 60easymultiple choice

Read the full Resource Lifecycle Management explanation →

You are using Terraform to manage an AWS EC2 instance. During a planned update, you expect the instance to be destroyed and recreated because of a change to the user_data attribute. However, you want to ensure that the old instance is destroyed only after the new instance is successfully created, to minimize downtime. Which lifecycle meta-argument should you add to the aws_instance resource?

Question 61mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You have an AWS EC2 instance managed by Terraform. The operations team occasionally updates the instance's tags directly in the AWS Console to reflect temporary maintenance status. You want Terraform to ignore these external tag changes and not revert them during the next apply. However, you still want Terraform to manage other attributes of the instance. Which lifecycle meta-argument should you use?

Question 62hardmultiple choice

Read the full Resource Lifecycle Management explanation →

An operations engineer needs to remove an aws_iam_role and its attached aws_iam_role_policy_attachment from Terraform management without deleting the role in AWS, because the role is shared with an external team. The configuration for both resources will also be deleted from the repository. Which command sequence accomplishes this?

Question 63easymultiple choice

Read the full Resource Lifecycle Management explanation →

A teammate accidentally deleted an `aws_security_group` through the AWS Console. The resource is still present in Terraform state, and no configuration changes have been made. What will `terraform plan` report for that resource, and what is the appropriate next step?

Question 64mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You have an AWS Lambda function defined with the aws_lambda_function resource. The function's source code is packaged in an S3 object. You want Terraform to replace the Lambda function whenever the S3 object's ETag changes, indicating a new version of the code. Which configuration should you add to the aws_lambda_function resource?

Question 65hardmultiple choice

Read the full Resource Lifecycle Management explanation →

During a refactor, an engineer renames the Terraform address of an aws_s3_bucket from aws_s3_bucket.logs to aws_s3_bucket.audit_logs in the configuration, keeping every argument identical. The bucket holds production logs. What is the safest way to apply this change without destroying and recreating the bucket?

Question 66easymultiple choice

Read the full Resource Lifecycle Management explanation →

A team is using Terraform to manage an aws_s3_bucket. They want Terraform to ignore any changes made to the bucket's tags outside of Terraform, but they still want Terraform to manage the bucket policy and versioning configuration. Which lifecycle configuration should they add?

Question 67mediummultiple choice

Read the full Resource Lifecycle Management explanation →

You have an aws_instance resource in your Terraform configuration that was created six months ago. The operations team now requires that any future replacement of this instance preserves the existing Elastic Network Interface (ENI) to maintain its private IP address. You add a lifecycle block with create_before_destroy = true to the aws_instance resource. What is the effect of this change when the instance must be replaced?