TF-004 Practice Test 16 — 15 Questions

Question 1

A user wants to remove a specific resource from Terraform state without destroying the actual infrastructure. Which command should they use?

Accepted Answer

terraform state rm resource. The `terraform state rm` command is the correct choice because it removes a specified resource from the Terraform state file without making any API calls to the actual infrastructure provider. This allows the resource to be detached from Terraform management while leaving the real-world resource running, which is exactly what the user wants.

Answer

terraform taint resource

Answer

terraform state mv resource

Answer

terraform destroy -target=resource

Question 2

A developer wants to see the list of resources currently managed by Terraform in the state file. Which command should they use?

Accepted Answer

terraform state list. `terraform state list` is the dedicated command to list all resources tracked in the Terraform state file. It reads the state directly and outputs the resource addresses (e.g., `aws_instance.web`), giving the developer a clear view of what Terraform currently manages.

Answer

terraform graph

Answer

terraform output

Answer

terraform show

Question 3

A team is defining their Infrastructure as Code strategy. Which two of the following are key benefits of using IaC compared to manual configuration?

Accepted Answer

Faster deployment and provisioning.. IaC automates the provisioning and configuration of infrastructure through code, eliminating the need for manual, error-prone steps. This enables rapid deployment of resources, often reducing setup times from hours to minutes by leveraging tools like Terraform to apply declarative configurations in parallel across multiple providers.

Answer

Reduced need for monitoring.

Answer

Elimination of all security vulnerabilities.

Answer

Automatic recovery from any infrastructure failure.

Question 4

Which TWO are benefits of Terraform's immutable infrastructure approach?

Accepted Answer

Easier rollbacks. Terraform's immutable infrastructure approach replaces entire resources rather than modifying them in-place. This means the previous version of the infrastructure is preserved as a state snapshot, allowing you to roll back by simply reapplying the prior configuration from your version control system. This eliminates the complexity of tracking incremental changes and ensures a clean, predictable rollback process.

Answer

Better performance

Answer

Faster provisioning

Answer

Lower cost

Question 5

A Terraform user wants to visualize the execution order of resources before applying changes. Which command provides a dependency graph view?

Accepted Answer

terraform graph. The `terraform graph` command generates a visual representation of the dependency graph for Terraform resources, showing the execution order based on implicit and explicit dependencies. This allows users to see which resources will be created, updated, or destroyed in sequence before applying changes. It outputs DOT format, which can be rendered with tools like Graphviz.

Answer

terraform show

Answer

terraform plan

Answer

terraform output

Question 6

Drag and drop the steps to use Terraform workspaces for environment separation in the correct order.

Accepted Answer

Create workspace, then Select workspace, then Set environment-specific variables, then Run terraform plan and apply. The correct sequence for using Terraform workspaces is: first create the workspace (if it doesn't exist) to isolate state, then select it to switch to that workspace's state, then set environment-specific variables (e.g., via .tfvars files) to tailor configuration, and finally run terraform plan and apply to manage resources. Workspaces are essential for environment separation, ensuring state isolation and preventing cross-environment interference.

Answer

Select workspace, then Create workspace, then Set environment-specific variables, then Run terraform plan and apply

Answer

Set environment-specific variables, then Create workspace, then Select workspace, then Run terraform plan and apply

Answer

Create workspace, then Set environment-specific variables, then Select workspace, then Run terraform plan and apply

Question 7

An organization wants to use Terraform to manage infrastructure in multiple environments (dev, staging, prod) with the same configuration but different variable values. Which approach should they use?

Accepted Answer

Use Terraform workspaces and separate variable files. Terraform workspaces allow you to manage multiple distinct sets of infrastructure resources within the same configuration by maintaining separate state files. By combining workspaces with separate variable definition files (e.g., `dev.tfvars`, `prod.tfvars`), you can reuse the same configuration code while applying environment-specific variable values, avoiding duplication and ensuring consistency across environments.

Answer

Create separate directories with duplicated configurations

Answer

Use a single state file with environment variables

Answer

Use different versions of Terraform for each environment

Question 8

A team uses Terraform to manage multiple AWS EC2 instances with a 'count' meta-argument. They need to reference the ID of the third instance in another resource's configuration. Which expression should they use?

Accepted Answer

aws_instance.example[2].id. In Terraform, the 'count' meta-argument creates a list of resources indexed starting from 0. To reference the third instance, you use index 2 (0, 1, 2). Option B correctly uses `aws_instance.example[2].id` to access the ID of the third EC2 instance.

Answer

aws_instance.example[1].id

Answer

element(aws_instance.example.*.id, 3)

Answer

aws_instance.example[3].id

Question 9

A DevOps engineer is managing a multi-cloud infrastructure using Terraform. The team relies on a module sourced from the Terraform Registry to deploy a standard web application. This module defines an input variable called 'instance_count' with a default value of 2. For the production environment, the engineer wants to deploy 3 instances. They create a root module configuration that references the module. In the root module's main.tf, they write a block that sets instance_count = 3. However, when they run terraform plan, the output indicates that the module will still use instance_count = 2. The engineer double-checks the configuration: the root module's main.tf is syntactically correct, the module source points to the correct registry module and version, and they have run terraform init and terraform validate without errors. What is the most likely reason the variable override is not taking effect?

Accepted Answer

The root module defines instance_count as a local value rather than passing it as an argument to the module block.. The scenario describes the engineer setting instance_count = 3 in the root module, but if it is defined as a local value (e.g., locals { instance_count = 3 }) rather than passed as an argument to the module block (e.g., module "web" { source = "...", instance_count = 3 }), the module will not receive the override and will use its default value. Option A is incorrect: module version does not prevent variable overrides; the module source is correct. Option B is incorrect: the variable is declared in the child module (it has a default). Option C is incorrect: terraform init is not required for configuration changes that don't affect providers or modules; terraform validate passed, indicating no syntax error.

Answer

The module version specified does not support variable overrides; the engineer must use a different module.

Answer

The variable 'instance_count' is not declared as an input variable in the child module's variables.tf.

Answer

The engineer forgot to run terraform init after modifying the root module's configuration.

Question 10

A team is migrating from using local state to a remote backend for collaboration. They want to ensure that team members cannot overwrite each other's changes. Which feature should they enable?

Accepted Answer

State locking (e.g., DynamoDB). State locking prevents concurrent modifications by ensuring that only one operation can modify the Terraform state at a time. When using a remote backend like S3 with DynamoDB, Terraform acquires a lock before writing to the state file and releases it after completion, preventing race conditions and state corruption.

Answer

S3 bucket versioning

Answer

Force unlock command

Answer

Workspace isolation

Question 11

After running `terraform plan`, a developer sees the following line in the output: `Plan: 1 to add, 0 to change, 0 to destroy.` What does this indicate?

Accepted Answer

One resource will be created.. The output `Plan: 1 to add, 0 to change, 0 to destroy` directly indicates that Terraform will create one new resource, with no modifications or removals. The 'add' count in a Terraform plan corresponds to resources that exist in the configuration but not in the current state file, meaning they will be provisioned during the apply phase.

Answer

One resource will be destroyed.

Answer

No changes will be made.

Answer

One resource will be changed.

Question 12

Which command can be used to see the current state of a specific resource in the Terraform state?

Accepted Answer

`terraform state show `. The `terraform state show ` command is specifically designed to display the attributes and current state of a single resource as recorded in the Terraform state file. This allows you to inspect the exact values Terraform is tracking for that resource, which is essential for debugging drift or understanding the current infrastructure representation.

Answer

`terraform output`

Answer

`terraform state list`

Answer

`terraform show`

Question 13

Drag and drop the steps to create and apply a Terraform plan in the correct order.

Accepted Answer

1. Terraform init, 2. Terraform plan, 3. Terraform apply. The correct sequence is: Terraform init (initialize the working directory and download providers/modules), Terraform plan (review the changes Terraform will make), and Terraform apply (execute the planned changes). This order ensures the environment is ready, changes are reviewed, and then safely applied.

Answer

1. Terraform plan, 2. Terraform init, 3. Terraform apply

Answer

1. Terraform init, 2. Terraform apply, 3. Terraform plan

Answer

1. Terraform plan, 2. Terraform apply, 3. Terraform init

Question 14

Which TWO commands are part of the core Terraform workflow? (Choose two.)

Accepted Answer

terraform init. `terraform init`, is correct because it initializes a working directory containing Terraform configuration files, downloading and installing the required providers and modules. This is the first command in the core Terraform workflow, which follows the sequence: init, plan, apply. Without `init`, subsequent commands like `plan` or `apply` will fail due to missing provider plugins and backend configuration.

Answer

terraform fmt

Answer

terraform console

Answer

terraform get

Question 15

Refer to the exhibit. A Terraform plan fails with the error shown. What is the most likely cause?

Accepted Answer

Another Terraform run is currently in progress.. The error message indicates that Terraform cannot acquire a state lock. This typically occurs when another Terraform run is already in progress and holds the lock on the state file. Terraform uses a locking mechanism (often via DynamoDB) to prevent concurrent modifications; if a lock is already held, subsequent runs will fail with this error until the lock is released or expires.

Answer

The S3 bucket does not have versioning enabled.

Answer

The DynamoDB table is not configured correctly.

Answer

The state file is corrupted.