Be able to read Terraform plan, apply, and state output and explain declarative IaC's advantage over manual provisioning. The most important thing: distinguish resources Terraform manages from data sources it only reads, and know state is required for accurate plans.
Start practicing
Understand Terraform's purpose — choose a session length
Free · No account required
Domain overview
This domain covers why Terraform exists: declarative Infrastructure as Code versus manual console clicks, the plan/apply workflow, providers, state, and data sources. Questions use exhibits of CLI output, configuration snippets, or state files and ask you to interpret what Terraform is doing and why that behavior matters.
Exam objectives
Explaining declarative IaC benefits over manual cloud console configuration, including repeatability and version control
Reading terraform plan and terraform apply output to identify resources to add, change, or destroy
Identifying the purpose of data sources, such as querying existing infrastructure without managing it
Interpreting terraform.tfstate contents to infer tracked resources, attributes, and provider metadata
Assuming a data source creates or manages a resource; data sources only read existing information for use in configuration.
Confusing plan output symbols or wording, so a destroy or replacement is misread as a simple in-place update.
Believing state is optional or merely a cache; state maps configuration to real resources and drives plan accuracy.
Click any question to see the full explanation and answer options, or start a focused practice session above.
A company wants to manage its infrastructure as code using Terraform. The team has a mix of on-premises servers and cloud resources in AWS and Azure. Which of the following best describes Terraform's purpose in this scenario?
2A developer runs `terraform plan` and sees that Terraform will create a new S3 bucket and modify a security group. Which Terraform feature allows the developer to review these changes before applying them?
3A team is using Terraform to manage multiple environments (dev, staging, prod) with the same configuration but different variable values. They want to avoid duplicating configuration files. Which Terraform feature is best suited for this?
4An organization uses Terraform Cloud for remote state management. A user runs `terraform apply` locally but receives an error that the state is locked. What is the most likely cause?
5Your organization manages a multi-cloud infrastructure using Terraform. The infrastructure includes an AWS VPC with subnets and EC2 instances, and an Azure resource group with virtual networks and VMs. The Terraform configuration is stored in a Git repository, and state is stored in an S3 bucket with DynamoDB locking. Recently, a developer updated the configuration to add a new security group rule in AWS, but after running `terraform apply`, the rule was not created. The developer verified that the configuration file contains the rule. Additionally, the developer noticed that the state file shows the security group exists but without the new rule. The developer ran `terraform plan` again, and it shows that the rule will be created. However, when applying, it fails with a 'timeout' error. The operations team suspects network connectivity issues to the S3 backend. What is the best course of action to resolve this issue?
6Which TWO statements accurately describe the purpose of Terraform? (Choose two.)
7A team is reviewing the Terraform configuration shown in the exhibit. Which statement best describes the relationship between the two resources?
8A company is adopting Terraform to manage its multi-cloud infrastructure on AWS and Azure. The infrastructure team has written several Terraform configurations stored in a Git repository. Each configuration is applied by different team members using their local machines. Recently, the team has been experiencing state file conflicts and inconsistencies, leading to infrastructure drift. The team currently stores the state file locally. They want to ensure that only one person can apply changes at a time and that the state file is always up-to-date. They also want to be able to collaborate effectively without overwriting each other's changes. Which approach should they implement?
9A junior DevOps engineer is learning about Infrastructure as Code (IaC) and asks why Terraform is preferred over manual configuration in cloud consoles. Which of the following is the primary benefit of using Terraform for infrastructure management?
10A team is evaluating Terraform for managing their multi-cloud infrastructure. Which TWO statements accurately describe Terraform's purpose and capabilities? (Choose two.)
11A team member runs terraform apply with the configuration shown in the exhibit. The apply succeeds, but the output of the local-exec provisioner shows an empty string for the public IP address. What is the most likely cause?
12Which of the following accurately describe core purposes and benefits of using Terraform in a cloud infrastructure environment? Choose all that apply. (There are four correct answers.)
13Drag and drop the steps to destroy infrastructure managed by Terraform in the correct order.
14Match each Terraform error code to its meaning.
15A company wants to manage both on-premises and cloud infrastructure with a single tool. Which feature of Terraform makes this possible?
16During a terraform apply, the state file becomes corrupted. What is the recommended recovery method?
17Which Terraform feature allows managing multiple separate sets of infrastructure from the same configuration?
18What does Terraform's declarative model mean for infrastructure changes?
19A company wants to ensure that Terraform configurations are consistent across teams. What practice should they adopt?
20Which Terraform feature helps manage dependencies between resources?
21What is the primary purpose of Terraform's state file?
22A DevOps engineer needs to integrate Terraform with a CI/CD pipeline. What is a common practice?
23A company has a Terraform configuration that works correctly in us-east-1 but fails in us-west-2 due to resource availability. What is the best way to handle this?
24Which TWO are benefits of Terraform's immutable infrastructure approach?
25Which THREE are considered Terraform's best practices?
26Which TWO tasks are better suited for configuration management tools than Terraform?
27Refer to the exhibit. What does this output indicate?
28Refer to the exhibit. What is the purpose of the data source?
29Refer to the exhibit. What does this output show?
30A junior DevOps engineer is asked to explain the primary purpose of Terraform. Which statement best describes Terraform's purpose?
31A team wants to use Terraform to manage their AWS infrastructure. They have existing resources created manually. What is the recommended approach to bring these resources under Terraform management?
32An organization has a multi-cloud strategy using Terraform. They need to ensure that secrets such as API keys are not stored in plaintext in the configuration files. Which Terraform feature should they use to securely manage sensitive data?
33Which TWO of the following are key advantages of using Terraform over manual infrastructure management? (Select TWO.)
34Which THREE statements accurately describe Terraform state? (Select THREE.)
35Which TWO of the following are core components of Terraform's workflow? (Select TWO.)
36Refer to the exhibit. A developer runs terraform plan and sees the above output. What will happen when terraform apply is executed?
37Refer to the exhibit. A user attempts to run terraform apply with this configuration. What error will occur?
38Refer to the exhibit. A team is troubleshooting a Terraform deployment. What information can be inferred from this state file?
39A company wants to adopt infrastructure as code (IaC) to manage their expanding cloud environment. Which problem does Terraform directly address?
40A DevOps engineer runs terraform plan and sees that a resource will be destroyed and recreated, but they expected an in-place update. The resource is an AWS EC2 instance with a specific AMI. Which attribute change is most likely causing the destruction?
41A new user is learning Terraform. They write a configuration file and run terraform apply expecting to provision resources. However, they forgot to run terraform init first. What will happen?
42A team uses a remote backend (S3) with state locking via DynamoDB. One team member runs terraform apply and it fails mid-way. Another team member immediately tries to run terraform plan. What is likely to happen?
43An organization has multiple teams using Terraform to manage shared infrastructure. They want to enforce policies such as requiring specific tags on all resources and preventing the use of certain instance types. Which Terraform feature should they implement to meet these requirements?
44A team wants to manage infrastructure across multiple cloud providers using a single tool that supports infrastructure as code. Which tool is best suited for this purpose?
45A team has been manually modifying cloud resources outside of Terraform. They now find that Terraform plans show changes that don't match their expectations. What core concept of Terraform's purpose does this situation violate?
46An organization is evaluating Terraform for managing interconnected resources that must be created in a specific order. Why is Terraform's dependency graph handling a key aspect of its purpose?
47Which TWO statements best describe Terraform's purpose? (Choose two.)
48Which THREE are part of Terraform's core workflow? (Choose three.)
49A developer is new to infrastructure as code and wants to deploy a simple web server on AWS using a tool that allows them to define the infrastructure in a reusable and version-controlled manner. They are considering using the AWS Management Console, AWS CLI, or Terraform. Which course of action aligns best with Terraform's purpose?
50A team has been managing their AWS infrastructure using a collection of Bash scripts that create resources in a specific order. They frequently encounter issues where resources are created out of order or not properly cleaned up. They want to adopt a more reliable approach that ensures consistent provisioning and teardown. Which action best aligns with Terraform's purpose?
51A company uses AWS CloudFormation for AWS resources and Azure Resource Manager for Azure resources. They want to standardize on a single tool that can manage resources across both clouds with a consistent workflow and support for infrastructure as code. They also want to ensure that their infrastructure can be version-controlled and reviewed. Which approach best fulfills Terraform's purpose?
52A DevOps team accidentally deleted their Terraform state file. The actual infrastructure (EC2 instances, security groups, etc.) is still running and unchanged. They have the Terraform configuration files that were used to create the infrastructure. They want to re-establish management of the existing infrastructure without recreating it. Which course of action aligns with Terraform's purpose?
53Which TWO statements accurately describe key purposes of Terraform?
54Refer to the exhibit. What is the primary purpose of the version constraint '~> 4.0'?
55A platform team currently provisions servers by filing tickets that an operations group fulfills manually over several days. Leadership wants developers to describe the desired end state of that infrastructure in version-controlled files so the tooling itself figures out which resources to create, modify, or remove. Which characteristic of Terraform directly supports this goal?
56A small company with no cloud automation today wants to understand what adopting Terraform would give them beyond simply storing infrastructure definitions in Git. Which two outcomes does Terraform's core workflow provide? (Choose two.)
Deep-dive questions
The most-searched questions in this domain — detailed explanations, worked examples, full answer breakdowns.
Be able to read Terraform plan, apply, and state output and explain declarative IaC's advantage over manual provisioning. The most important thing: distinguish resources Terraform manages from data sources it only reads, and know state is required for accurate plans.
The Courseiva TF-004 question bank contains 56 questions in the Understand Terraform's purpose domain, covering the 13% of the exam attributed to this domain in the official HashiCorp blueprint. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Understand Terraform's purpose domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included