Courseiva
Knowledge + Practice
CertificationsVendorsCareer RoadmapsLabs & ToolsStudy GuidesGlossaryPractice Questions
C
Courseiva

Free IT certification practice questions with explained answers for CCNA, CompTIA, AWS, Azure, Google Cloud, and more.

Certification Practice Questions

CCNA practice questionsSecurity+ SY0-701 practice questionsAWS SAA-C03 practice questionsAZ-104 practice questionsAZ-900 practice questionsCLF-C02 practice questionsA+ Core 1 practice questionsGoogle Cloud ACE practice questionsCySA+ CS0-003 practice questionsNetwork+ N10-009 practice questions
View all certifications →

Product

CertificationsCertification PathsExam TopicsPractice TestsExam Dumps vs Practice TestsStudy HubComparisons

Company

AboutContactEditorial PolicyQuestion Writing PolicyTrust Center

Legal

Privacy PolicyTerms of Service

Courseiva is a free IT certification practice platform offering original exam-style practice questions, detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics for Cisco, CompTIA, Microsoft, AWS, and other technology certifications.

© 2026 Courseiva. Courseiva is operated by JTNetSolutions Ltd. All rights reserved.

Courseiva is an independent certification practice platform and is not affiliated with, endorsed by, or sponsored by Cisco, Microsoft, AWS, CompTIA, Google, ISC2, ISACA, or any other certification vendor. Vendor names and certification marks are used only to identify the exams learners are preparing for.

← Use the core Terraform workflow practice sets

TF-003 Use the core Terraform workflow • Complete Question Bank

TF-003 Use the core Terraform workflow — All Questions With Answers

Complete TF-003 Use the core Terraform workflow question bank — all 0 questions with answers and detailed explanations.

53
Questions
Free
No signup
Certifications/TF-003/Practice Test/Use the core Terraform workflow/All Questions
Question 1easymultiple choice
Read the full Use the core Terraform workflow explanation →

A team uses Terraform to manage infrastructure. After running 'terraform apply', a developer notices that a new security group rule was added, but then immediately removed. What is the most likely cause?

Question 2mediummultiple choice
Read the full Use the core Terraform workflow explanation →

During a 'terraform plan', you see the following output: 'Plan: 1 to add, 2 to change, 0 to destroy.' However, after running 'terraform apply', the actual number of resources changed is different. What is the most likely reason?

Question 3hardmultiple choice
Read the full Use the core Terraform workflow explanation →

A DevOps engineer is troubleshooting a failed 'terraform apply'. The error message says: 'Error: Error applying IAM policy: The policy failed validation'. The IAM policy is defined using HCL in a JSON-encoded string. What is the most efficient way to debug this issue?

Question 4easymultiple choice
Read the full Use the core Terraform workflow explanation →

A team wants to ensure that all Terraform runs are recorded for audit purposes. Which practice should they implement?

Question 5mediummulti select
Read the full Use the core Terraform workflow explanation →

Which TWO actions are part of the core Terraform workflow? (Choose two.)

Question 6hardmulti select
Read the full Use the core Terraform workflow explanation →

Which THREE of the following are valid reasons to use 'terraform refresh'? (Choose three.)

Question 7hardmultiple choice
Read the full Use the core Terraform workflow explanation →

You are a DevOps engineer at a large e-commerce company. The infrastructure team uses Terraform to manage AWS resources across multiple accounts. Recently, they introduced a new module that creates an S3 bucket with a bucket policy. The module is used in several environments (dev, staging, prod). After merging a pull request that updates the bucket policy to grant cross-account access to a new partner account, the 'terraform apply' in the dev environment fails with: 'Error: Error putting S3 policy: AccessDenied: Access Denied'. The team is using a remote backend (S3) with DynamoDB locking. The CI/CD pipeline runs as an IAM role with permissions to manage infrastructure. The module uses 'aws_iam_policy_document' data source to construct the policy. The error occurs only in dev, not staging or prod. What is the most likely cause and the correct course of action?

Question 8easymultiple choice
Read the full Use the core Terraform workflow explanation →

A team is using Terraform for infrastructure as code. They want to ensure that the state file is stored securely and can be accessed by multiple team members. Which backend type should they use?

Question 9mediummulti select
Read the full Use the core Terraform workflow explanation →

Which TWO of the following are valid steps in the core Terraform workflow?

Question 10hardmultiple choice
Read the full Use the core Terraform workflow explanation →

An operator runs terraform apply and receives the exhibit error. The instance was created but Terraform reports a failure. What is the most likely cause?

Exhibit

Refer to the exhibit.

```
Error: Error applying plan!

  on main.tf line 12, in resource "aws_instance" "web":
  12:   ami = "ami-0c55b159cbfafe1f0"

The resource "aws_instance" "web" was successfully created but failed to initialize after creation. The following errors may help:

Error: timeout - last error: SSH connection failed (unreachable)
```
Question 11mediummultiple choice
Read the full Use the core Terraform workflow explanation →

A company uses Terraform to manage infrastructure in multiple AWS accounts. An engineer runs terraform plan and sees that a security group rule will be updated, but the change is not intended. The engineer wants to understand why Terraform is proposing the change without affecting other resources. Which approach should the engineer take to troubleshoot?

Question 12hardmulti select
Read the full Use the core Terraform workflow explanation →

A team is adopting Terraform for infrastructure deployment. They want to ensure that the core workflow (write, plan, apply) is followed effectively. Which two practices should they adopt? (Choose two.)

Question 13easymultiple choice
Read the full Use the core Terraform workflow explanation →

What is the most likely cause of this error?

Exhibit

Refer to the exhibit.

```hcl
resource "aws_instance" "web" {
  ami           = "ami-0c55b159cbfafe1f0"
  instance_type = "t2.micro"
}
```

An engineer runs `terraform apply` with this configuration and receives the following error:

```
Error: Error launching source instance: UnauthorizedOperation: You are not authorized to perform this operation.
```
Question 14mediummulti select
Read the full Use the core Terraform workflow explanation →

Which three of the following are required steps in the core Terraform workflow for managing infrastructure? (Choose three.)

Question 15mediummulti select
Read the full Use the core Terraform workflow explanation →

Which of the following statements about the core Terraform workflow (Write, Plan, Apply) are correct? (Choose all that apply. There are four correct answers.)

Question 16mediumdrag order
Read the full Use the core Terraform workflow explanation →

Drag and drop the steps to import existing infrastructure into Terraform state in the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
Question 17mediummatching
Read the full Use the core Terraform workflow explanation →

Match each Terraform workflow stage to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Author infrastructure as code configuration

Preview changes before applying

Execute the planned changes

Tear down managed infrastructure

Restructure configuration without changing external resources

Question 18easymultiple choice
Read the full Use the core Terraform workflow explanation →

A user runs 'terraform plan' and the output includes a change that adds a new resource. However, the user expected the change to modify an existing resource. What is the most likely cause?

Question 19mediummultiple choice
Read the full Use the core Terraform workflow explanation →

During 'terraform apply', a user receives an error: 'Error: Error creating resource: Resource already exists'. The resource does not appear in the Terraform state. What is the most likely cause?

Question 20hardmultiple choice
Read the full Use the core Terraform workflow explanation →

A team is using Terraform with multiple environments (dev, staging, prod) and wants to use separate state files. They are considering workspaces. A senior engineer suggests using separate directory structures instead of workspaces for prod. What is the strongest reason for this recommendation?

Question 21easymultiple choice
Read the full Use the core Terraform workflow explanation →

After modifying a Terraform configuration file, a user runs 'terraform plan' and sees 'No changes. Infrastructure is up-to-date.' What is the most likely reason?

Question 22mediummultiple choice
Read the full Use the core Terraform workflow explanation →

A user runs 'terraform plan' and it shows 'No changes. Infrastructure is up-to-date.' However, the user knows they added a new resource block to the configuration. What could explain this?

Question 23hardmultiple choice
Read the full Use the core Terraform workflow explanation →

A team uses Terraform with remote state in an S3 backend and DynamoDB for state locking. A user runs 'terraform apply' and receives the error: 'Error acquiring the state lock'. The lock info shows a lock ID and caller. What is the best immediate course of action?

Question 24easymultiple choice
Read the full Use the core Terraform workflow explanation →

What is the primary purpose of 'terraform init'?

Question 25mediummultiple choice
Read the full Use the core Terraform workflow explanation →

A user wants to import an existing AWS EC2 instance into Terraform state so it can be managed. After writing the resource block matching the instance, what is the correct next step?

Question 26hardmultiple choice
Read the full Use the core Terraform workflow explanation →

A company uses Terraform Cloud and wants to enforce policies that prevent creating resources with public IP addresses unless explicitly approved. What Terraform Cloud feature should they use?

Question 27easymulti select
Read the full Use the core Terraform workflow explanation →

Which TWO commands are part of the core Terraform workflow? (Choose two.)

Question 28mediummulti select
Read the full Use the core Terraform workflow explanation →

Which TWO scenarios could cause 'terraform plan' to show 'No changes' even though the configuration file was recently modified? (Choose two.)

Question 29hardmulti select
Read the full Use the core Terraform workflow explanation →

Which THREE are valid methods to manage Terraform state files? (Choose three.)

Question 30easymultiple choice
Read the full Use the core Terraform workflow explanation →

A developer runs `terraform init` in a directory containing Terraform configuration files. After initialization, they notice that a provider plugin was installed. Where are provider plugins stored locally by default?

Question 31easymultiple choice
Read the full Use the core Terraform workflow explanation →

A team uses Terraform to manage infrastructure. They have multiple configuration directories for different environments (dev, staging, prod). They want to reuse common modules across environments. Which approach aligns with the core Terraform workflow best practices?

Question 32easymultiple choice
Read the full Use the core Terraform workflow explanation →

When running `terraform plan`, an engineer sees that Terraform proposes to destroy an existing resource even though the configuration file appears unchanged. What is the most likely cause?

Question 33mediummultiple choice
Read the full Use the core Terraform workflow explanation →

An organization uses a remote backend (S3) with DynamoDB for state locking. A developer runs `terraform plan` and gets the error: "Error acquiring the state lock: ConditionalCheckFailedException". What is the most likely cause?

Question 34mediummultiple choice
Read the full Use the core Terraform workflow explanation →

A team is using Terraform workspaces to manage multiple environments with a single configuration. They store state in an S3 backend. Which statement about Terraform workspaces is true?

Question 35mediummultiple choice
Read the full Use the core Terraform workflow explanation →

An engineer accidentally destroys a critical resource by running `terraform apply` after an incorrect `terraform plan`. They want to recover the resource quickly. What should they do?

Question 36hardmultiple choice
Read the full Use the core Terraform workflow explanation →

A company has a monolithic Terraform configuration that manages all of its AWS infrastructure. They want to break it into smaller, manageable configurations without causing downtime or resource duplication. Which approach best follows the core Terraform workflow?

Question 37hardmultiple choice
Read the full Use the core Terraform workflow explanation →

A developer is troubleshooting a Terraform configuration that fails during `terraform plan` with the error: "Error: Invalid reference". The error points to a line that references `var.environment` in a module block. What is the most likely cause?

Question 38hardmultiple choice
Read the full Use the core Terraform workflow explanation →

An organization uses Terraform with a remote backend in Azure. After a network outage, a developer attempts to run `terraform apply` and receives the error: "Error: Failed to get existing workspaces: blob (key) not found". What is the most likely cause?

Question 39easymulti select
Read the full Use the core Terraform workflow explanation →

Which TWO statements accurately describe the `terraform plan` command? (Select TWO.)

Question 40mediummulti select
Read the full Use the core Terraform workflow explanation →

Which TWO actions are part of the core Terraform workflow? (Select TWO.)

Question 41hardmulti select
Read the full Use the core Terraform workflow explanation →

Which THREE are valid uses of the `terraform state` command? (Select THREE.)

Question 42easymultiple choice
Read the full Use the core Terraform workflow explanation →

Refer to the exhibit. A developer runs `terraform init` and then `terraform plan`. The plan output shows that Terraform will create the AWS instance. However, the state file is expected to be stored in S3 under the key "prod/terraform.tfstate". Which statement is true?

Exhibit

Refer to the exhibit.

```hcl
# main.tf
terraform {
  backend "s3" {
    bucket = "my-org-terraform-state"
    key    = "prod/terraform.tfstate"
    region = "us-east-1"
  }
}

provider "aws" {
  region = "us-west-2"
}

resource "aws_instance" "example" {
  ami           = "ami-0c55b159cbfafe1f0"
  instance_type = "t2.micro"
}
```
Question 43mediummultiple choice
Read the full Use the core Terraform workflow explanation →

Refer to the exhibit. A developer runs `terraform plan -out=tfplan` and then `terraform apply "tfplan"`. During apply, network fails and apply is interrupted. The developer then runs `terraform apply` again (without a plan file). What will happen?

Exhibit

Refer to the exhibit.

```
$ terraform plan -out=tfplan
$ terraform apply "tfplan"
```
The developer runs the commands above. During the apply, the network connection is lost and the command fails halfway through. The developer re-establishes connectivity and runs `terraform apply` again without specifying a plan file. What will happen?
Question 44hardmultiple choice
Read the full Use the core Terraform workflow explanation →

Refer to the exhibit. A developer runs the commands shown. The Terraform configuration defines a `random_pet` resource. The developer expects the plan to show a new resource to be created, but it says "No changes." What is the most likely reason?

Exhibit

Refer to the exhibit.

```
$ terraform init
Initializing the backend...

Successfully configured the backend "local"! Terraform will automatically
use this backend unless the backend configuration changes.

Initializing provider plugins...
- Using previously-installed hashicorp/random v3.5.1

Terraform has been successfully initialized!

$ terraform plan

No changes. Your infrastructure matches the configuration.

$ terraform apply -auto-approve

No changes. Your infrastructure matches the configuration.
```
Question 45easymultiple choice
Read the full Use the core Terraform workflow explanation →

A developer runs terraform plan and sees that a resource will be destroyed. They want to confirm the exact cause of the destruction before applying. What should they do?

Question 46mediummultiple choice
Read the full Use the core Terraform workflow explanation →

During a terraform apply, the process crashes mid-way. The state file may be in an inconsistent state. What is the first recommended step to recover?

Question 47hardmultiple choice
Read the full Use the core Terraform workflow explanation →

An organization uses Terraform workspaces to manage multiple environments (dev, staging, prod). They notice that terraform plan in the prod workspace unexpectedly shows changes to a resource that should be identical across workspaces. The resource uses a backend that stores state in an S3 bucket. What is the most likely cause?

Question 48mediummulti select
Read the full Use the core Terraform workflow explanation →

During terraform init, which TWO of the following actions occur? (Choose two.)

Question 49hardmulti select
Read the full Use the core Terraform workflow explanation →

Which THREE of the following are valid flags for the terraform apply command? (Choose three.)

Question 50hardmultiple choice
Read the full Use the core Terraform workflow explanation →

A team uses Terraform with remote state in Azure Storage. They have a CI/CD pipeline that runs terraform plan and apply. Recently, a team member ran terraform apply manually from their local machine and the process crashed due to a network interruption. Now, the pipeline's next run fails with an error: "Error: Error acquiring the state lock". The team is unsure who holds the lock. They need to proceed with the pipeline as soon as possible. What should they do?

Question 51mediummultiple choice
Read the full Use the core Terraform workflow explanation →

A developer is reviewing a terraform plan output and sees that a resource of type "aws_instance" with name "web" will be updated. The developer expected no changes because the configuration hasn't been modified. The instance was manually resized in the AWS console by another team. The developer wants to reconcile the state without destroying the instance. What should they do?

Question 52hardmultiple choice
Read the full Use the core Terraform workflow explanation →

A company uses Terraform workspaces to manage environments. They have a monorepo with separate configurations for each environment. They want to introduce a new team that will manage only the staging environment. The new team will run terraform commands only on the staging workspace. They are using a single S3 backend for all workspaces. The team is concerned about accidentally applying changes to other workspaces. What is the best way to restrict the team's access?

Question 53mediummultiple choice
Read the full Use the core Terraform workflow explanation →

A team is running terraform in a CI/CD pipeline that executes multiple jobs in parallel for different modules. They notice that terraform init takes a long time in each job because it downloads provider plugins repeatedly. They want to speed up the init process by caching providers. What should they do?

Practice tests

Scored 10-question sessions with instant feedback and explanations.

TF-003 Practice Test 1 — 10 Questions→TF-003 Practice Test 2 — 10 Questions→TF-003 Practice Test 3 — 10 Questions→TF-003 Practice Test 4 — 10 Questions→TF-003 Practice Test 5 — 10 Questions→TF-003 Practice Exam 1 — 20 Questions→TF-003 Practice Exam 2 — 20 Questions→TF-003 Practice Exam 3 — 20 Questions→TF-003 Practice Exam 4 — 20 Questions→Free TF-003 Practice Test 1 — 30 Questions→Free TF-003 Practice Test 2 — 30 Questions→Free TF-003 Practice Test 3 — 30 Questions→TF-003 Practice Questions 1 — 50 Questions→TF-003 Practice Questions 2 — 50 Questions→TF-003 Exam Simulation 1 — 100 Questions→

Practice by domain

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

Understand IaC conceptsUnderstand Terraform basicsUnderstand Terraform's purposeUse Terraform outside the core workflowInteract with Terraform modulesUse the core Terraform workflowImplement and maintain stateRead, generate and modify configuration

Practice by scenario

Filter questions by type — troubleshooting, exhibit, drag-and-drop, PBQ, ACLs, OSPF, and more.

Browse scenarios→

Continue studying

All Use the core Terraform workflow setsAll Use the core Terraform workflow questionsTF-003 Practice Hub