TF-004 Understand Terraform basics — Timed 10 Questions

Question 1

An organization uses Terraform Cloud for remote state management. They have a workspace that uses the CLI-driven run workflow. A developer runs `terraform plan` locally and sees that the plan succeeds. However, when they push the same configuration to the version control system (VCS) connected to the workspace, the plan fails with a state lock error. What is the most likely reason?

10 minute time limit — choose an answer to begin.

Accepted Answer

The local `terraform plan` left the state locked in Terraform Cloud. In Terraform Cloud's CLI-driven workflow, a local `terraform plan` acquires a state lock only during the execution and releases it immediately afterward. Therefore, a local plan does not leave the state locked. The most likely cause of a state lock error when pushing to VCS is that a previous run (e.g., from another pipeline or manual trigger) is still in progress or a lock was not properly released due to a transient failure. This is a common scenario where concurrent runs conflict.

Answer

The Terraform version in the VCS pipeline is different

Answer

The VCS branch is not configured as the workspace's working branch

Answer

The VCS pipeline does not have access to the Terraform Cloud workspace

Question 2

Which TWO of the following are true about Terraform state? (Choose two.)

Accepted Answer

State can be used to improve performance by caching resource attributes.. Terraform state serves two primary functions. Firstly, it acts as a cache for resource attributes, allowing Terraform to avoid re-querying the provider for every attribute during planning and applying. This improves performance, especially when dealing with large infrastructures or APIs with rate limits, as the state file stores the last-known values of resource attributes. Secondly, the state file is crucial for mapping the real-world infrastructure resources (like a specific EC2 instance or S3 bucket) to the resources defined in your Terraform configuration files. It tracks the identity and attributes of these managed resources.

Answer

State never contains sensitive data, so it can be stored in version control.

Answer

State does not store resource IDs; it only stores metadata.

Answer

State should be stored locally by default for team collaboration.

Question 3

Which three of the following are valid ways to pass variable values to a Terraform configuration?

Accepted Answer

Using the -var flag on the command line.. The `-var` flag is a standard Terraform CLI option used to pass variable values directly on the command line, e.g., `terraform apply -var='region=us-east-1'`. This overrides any default variable values and is a core mechanism for supplying input variables during plan or apply operations.

Answer

Using the -assign flag on the command line.

Answer

Using a YAML file.

Question 4

Refer to the exhibit. What will happen when terraform plan is run?

Accepted Answer

It will fail with an error about missing required argument.. The Terraform configuration for an AWS S3 bucket requires the `bucket` argument to be explicitly set. If the `bucket` argument is omitted, Terraform will fail during `terraform plan` with an error indicating a missing required argument, as the provider cannot infer or generate a bucket name automatically without explicit configuration.

Answer

It will prompt for the bucket name.

Answer

It will create a bucket with a random name.

Answer

It will succeed because bucket name can be generated automatically.

Question 5

Refer to the exhibit. What does this output indicate?

Accepted Answer

There is one resource managed by Terraform in this state.. The output shows a Terraform state file listing a single resource (e.g., `aws_instance.web`). The `resources` array contains exactly one entry, and the `count` field (if present) or the structure indicates one managed resource. Option D is correct because the state file explicitly shows one resource being tracked by Terraform.

Answer

The state file contains multiple resources.

Answer

The resource is not in the state.

Answer

The configuration has a resource named web.

Question 6

Refer to the exhibit. What is the most likely cause of this error?

Accepted Answer

The provider block version constraint conflicts with the installed provider version.. The explanation describes an error scenario where a provider version constraint conflicts with an installed version, which would indeed make option A correct. However, this cannot be confirmed without seeing the specific error message from the exhibit.

Answer

The required_version block in the configuration is too strict.

Answer

The .terraform.lock.hcl file is corrupted.

Answer

The Terraform CLI version is incompatible with the provider.

Question 7

A team uses Terraform to manage AWS resources. They want to ensure that a security group is created before an EC2 instance that references it. What is the best practice?

Accepted Answer

Use `depends_on` meta-argument. `depends_on` is the explicit meta-argument in Terraform that allows you to define a hard dependency between resources. While Terraform often infers implicit dependencies when one resource directly references an attribute of another (e.g., an EC2 instance referencing a security group's ID), there are scenarios where an explicit dependency is required to ensure correct ordering. This is particularly true when references are indirect (e.g., via a variable or data source) or when a non-obvious ordering is critical. In such cases, `depends_on` is the best practice to explicitly ensure the security group is created before the EC2 instance, preventing plan/apply errors.

Answer

Use `for_each` to iterate over resources

Answer

Use `count` to create the security group first

Answer

Use `provisioner` to wait for the security group

Answer

Use a data source to reference the security group

Question 8

In Terraform, which command is used to format configuration files according to the HCL canonical style?

Accepted Answer

terraform fmt. `terraform fmt` is the dedicated Terraform CLI command that rewrites configuration files to adhere to the HCL canonical style, ensuring consistent formatting (e.g., indentation, alignment of equals signs). It does not modify the logic or state of the configuration, only its visual layout.

Answer

terraform plan

Answer

terraform init

Answer

terraform validate

Answer

terraform apply

Question 9

Which of the following commands creates an execution plan that shows what resources will be created, updated, or destroyed?

Accepted Answer

terraform plan. The `terraform plan` command creates an execution plan by comparing the current state against the configuration, showing what resources will be created, updated, or destroyed without making any changes. This is the correct command for previewing infrastructure changes before applying them.

Answer

terraform apply

Answer

terraform output

Answer

terraform destroy

Answer

terraform validate

Question 10

A team manages infrastructure with Terraform. They recently updated the provider version in the configuration from 2.0 to 3.0. After running `terraform init`, they get errors that some resource arguments are no longer valid. What is the best approach to resolve this?

Accepted Answer

Run `terraform state replace-provider` to update the state. `terraform state replace-provider` updates the state file to reference the new provider version, ensuring Terraform can map existing resources to the updated provider schema without losing state. This is necessary when provider upgrades introduce breaking changes to resource arguments, as the state must reflect the new provider's expected format.

Answer

Revert the provider version back to 2.0

Answer

Delete the state file and re-import all resources

Answer

Run `terraform apply` to force the new provider

Answer

Change the backend configuration to use a new state file