TF-004 Understand Terraform's purpose Practice Test 2 — 15 Questions

Question 1

A junior DevOps engineer is learning about Infrastructure as Code (IaC) and asks why Terraform is preferred over manual configuration in cloud consoles. Which of the following is the primary benefit of using Terraform for infrastructure management?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

It enables version-controlled, repeatable, and automated infrastructure provisioning.. Terraform's core value proposition is enabling infrastructure as code (IaC), which allows teams to define infrastructure in declarative configuration files, version control them with Git, and provision consistently across environments. This repeatability and automation eliminate the drift and manual errors inherent in clicking through cloud consoles, making infrastructure management auditable, collaborative, and scalable.

Answer

It can only manage infrastructure on major cloud providers like AWS, Azure, and GCP.

Answer

It automatically rolls back any failed infrastructure changes.

Answer

It uses an imperative approach where you specify exact commands to execute.

Question 2

A team is evaluating Terraform for managing their multi-cloud infrastructure. Which TWO statements accurately describe Terraform's purpose and capabilities? (Choose two.)

Accepted Answer

Terraform can provision, update, and destroy infrastructure resources across multiple providers.. Terraform is designed as an infrastructure-as-code tool that can provision, update, and destroy resources across multiple cloud providers (e.g., AWS, Azure, GCP) and other services using a declarative configuration. This multi-provider capability is a core differentiator from single-cloud tools, enabling consistent workflows for hybrid and multi-cloud environments.

Answer

Terraform requires all configuration files to be placed in a single directory named 'terraform'.

Answer

Terraform uses an imperative language to specify the exact steps to create resources.

Answer

Terraform is primarily a configuration management tool for installing software on servers.

Question 3

A team member runs terraform apply with the configuration shown in the exhibit. The apply succeeds, but the output of the local-exec provisioner shows an empty string for the public IP address. What is the most likely cause?

Accepted Answer

The aws_instance resource does not have a public IP assigned because it is launched in a default VPC without auto-assign public IP, and no Elastic IP is attached.. The `local-exec` provisioner runs on the machine executing Terraform, not on the AWS instance itself. If the instance is launched in a default VPC without `auto-assign public IP` enabled and no Elastic IP is attached, the `self.public_ip` attribute will be an empty string. The provisioner then outputs that empty string, as it simply reads the attribute value from the resource state.

Answer

There is a dependency cycle between the aws_instance and null_resource causing Terraform to skip the provisioner.

Answer

The local-exec provisioner only runs during terraform destroy, not during apply.

Answer

The provisioner cannot access the aws_instance resource's attributes because it is defined in a separate resource block.

Question 4

Which three of the following best describe the core purpose and capabilities of Terraform? (Choose three.)

Accepted Answer

It is an infrastructure as code tool that allows you to define and provision data center infrastructure using a declarative configuration language.. Terraform is an infrastructure as code (IaC) tool that uses a declarative configuration language (HCL) to define and provision data center infrastructure. It manages both low-level components (e.g., compute instances, storage) and high-level components (e.g., DNS records, SaaS resources) across multiple cloud providers and on-premises systems via providers. Terraform maintains a state file to map real-world resources to your configuration, track metadata like dependencies, and enable incremental updates.

Answer

It is primarily a configuration management tool for installing and configuring software on existing servers.

Answer

It only supports public cloud providers (AWS, Azure, GCP) and cannot manage on-premises infrastructure.

Answer

It requires a running daemon or agent on each target machine to execute resource changes.

Question 5

Which of the following accurately describe core purposes and benefits of using Terraform in a cloud infrastructure environment? Choose all that apply. (There are four correct answers.)

Accepted Answer

Automates the provisioning and lifecycle management of infrastructure across multiple cloud providers.. Terraform's core purpose is to enable Infrastructure as Code (IaC) by allowing users to define cloud resources in declarative HCL (HashiCorp Configuration Language) files. It automates provisioning and lifecycle management across multiple providers (AWS, Azure, GCP, etc.) using a single workflow. State management is fundamental: Terraform maintains a state file to track real-world resources, enabling incremental planning and safe updates. Collaboration is facilitated by storing state remotely (e.g., in S3, Terraform Cloud) and using version control for configuration files, ensuring team consistency and auditability.

Answer

Generates real-time billing and cost optimization recommendations for deployed resources.

Answer

Provides a built-in drift detection mechanism that automatically reverts unauthorized manual changes to infrastructure.

Question 6

Drag and drop the steps to destroy infrastructure managed by Terraform in the correct order.

Accepted Answer

Run terraform plan -destroy, then run terraform destroy with confirmation.. Destroy plan previews removal; destroy command with confirmation tears down infrastructure.

Answer

Run terraform destroy, then run terraform plan -destroy.

Answer

Run terraform apply, then run terraform destroy.

Answer

Run terraform plan, then run terraform destroy.

Question 7

Match each Terraform error code to its meaning.

Accepted Answer

Exit code 0: Command succeeded without any error. Terraform exit codes indicate the result of command execution. Exit code 0 means success, 1 means general error, and 2 means usage error. The other codes are not defined by Terraform.

Answer

Exit code 0: General error during execution

Answer

Exit code 2: Command succeeded without any error

Answer

Exit code 3: State lock error

Question 8

A company wants to manage both on-premises and cloud infrastructure with a single tool. Which feature of Terraform makes this possible?

Accepted Answer

Provider plugins. Terraform uses provider plugins as the abstraction layer that allows it to interact with different infrastructure platforms. Each provider plugin (e.g., AWS, Azure, vSphere) implements the necessary API calls to manage resources on that platform. By using multiple provider plugins in the same configuration, Terraform can manage both on-premises infrastructure (e.g., VMware vSphere) and cloud infrastructure (e.g., AWS EC2) with a single tool.

Answer

State files

Answer

Provisioners

Answer

Workspaces

Question 9

During a terraform apply, the state file becomes corrupted. What is the recommended recovery method?

Accepted Answer

Restore from backup. The recommended recovery method for a corrupted Terraform state file is to restore it from a known good backup. Terraform does not have built-in corruption repair mechanisms, so maintaining regular backups of the state file (e.g., using remote backends with versioning like S3 versioning or Terraform Cloud) is the standard operational practice. Restoring from backup ensures the state accurately reflects the real-world infrastructure without manual intervention.

Answer

Re-run apply

Answer

Delete the state and re-import all resources

Answer

Use terraform state pull

Question 10

Which Terraform feature allows managing multiple separate sets of infrastructure from the same configuration?

Accepted Answer

Workspaces. Workspaces allow you to manage multiple distinct sets of infrastructure resources from the same Terraform configuration by maintaining separate state files. Each workspace isolates its own state data, enabling you to deploy, modify, or destroy infrastructure for different environments (e.g., dev, staging, prod) without interfering with each other. This is the native Terraform feature designed specifically for managing multiple separate instances of infrastructure from a single configuration.

Answer

Count

Answer

Providers

Answer

For_each

Question 11

What does Terraform's declarative model mean for infrastructure changes?

Accepted Answer

You describe the desired end state. In a declarative model, you describe the desired end state, and Terraform determines the steps to achieve that state, handling dependencies and changes automatically.

Answer

You manually approve each step

Answer

You must specify the order of creation

Answer

You write scripts to create resources

Question 12

A company wants to ensure that Terraform configurations are consistent across teams. What practice should they adopt?

Accepted Answer

Use modules from a registry. Using modules from a registry (Option B) is the correct practice because modules encapsulate reusable, version-controlled infrastructure configurations that enforce consistency across teams. By referencing a shared registry, teams can standardize on approved module versions, reducing drift and ensuring compliance with organizational policies. This approach aligns with Terraform's best practices for code reuse and collaboration.

Answer

Write all code in a single file

Answer

Use provisioners extensively

Answer

Avoid using variables

Question 13

Which Terraform feature helps manage dependencies between resources?

Accepted Answer

depends_on. The `depends_on` argument explicitly specifies dependencies, ensuring resources are created or destroyed in the correct order.

Answer

data source

Answer

output

Answer

provisioner

Question 14

What is the primary purpose of Terraform's state file?

Accepted Answer

Map configurations to real-world resources. The state file maps Terraform configurations to real-world resources, allowing Terraform to track resource metadata and detect drift.

Answer

Provide a GUI

Answer

Execute scripts

Answer

Store secrets

Question 15

A DevOps engineer needs to integrate Terraform with a CI/CD pipeline. What is a common practice?

Accepted Answer

Run terraform plan in a pull request. Running `terraform plan` in a pull request is a common practice because it allows the team to review the proposed infrastructure changes before they are applied. This integrates Terraform's safety mechanism into the CI/CD pipeline, ensuring that any destructive or unexpected modifications are caught during code review, not during deployment. It aligns with the principle of infrastructure as code (IaC) where changes are validated and approved through the same workflow as application code.

Answer

Avoid using variables

Answer

Use -auto-approve always

Answer

Store state in a local file