TF-003 Understand Terraform's purpose Practice Test 3 — 15 Questions

Question 1

Refer to the exhibit. What is the purpose of the data source?

Accepted Answer

To fetch an existing AMI ID. The data source queries the AWS API to fetch information about an existing AMI that matches the specified filters, returning its ID for use in the resource.

Answer

To create a new AMI

Answer

To define a variable

Answer

To output the AMI name

Question 2

Refer to the exhibit. What does this output show?

Accepted Answer

Resources managed by Terraform. The `terraform state list` output shows all resources currently tracked in the state file, indicating resources managed by Terraform.

Answer

Resources to be created

Answer

Resources in the configuration

Answer

Resources that are out of sync

Question 3

A junior DevOps engineer is asked to explain the primary purpose of Terraform. Which statement best describes Terraform's purpose?

Accepted Answer

Terraform is an infrastructure provisioning tool that manages cloud and on-premises resources using declarative configuration.. Option B is correct because Terraform is a declarative infrastructure provisioning tool that manages cloud and on-premises resources as code. Option A is incorrect because configuration management (e.g., Ansible) is a different category. Option C is incorrect because Terraform is not a scripting tool but an IaC tool. Option D is incorrect because monitoring is not Terraform's core purpose.

Answer

Terraform is a monitoring tool that tracks infrastructure changes.

Answer

Terraform is a scripting tool for automating manual tasks in cloud environments.

Answer

Terraform is a configuration management tool that installs and configures software on servers.

Question 4

A team wants to use Terraform to manage their AWS infrastructure. They have existing resources created manually. What is the recommended approach to bring these resources under Terraform management?

Accepted Answer

Use terraform import to bring each resource into state.. Option D is correct because the `terraform import` command is designed to bring existing resources into Terraform state so they can be managed. Option A is disruptive and unnecessary. Option B may cause errors if configurations don't match exactly. Option C is not a feature that automatically discovers resources.

Answer

Delete the existing resources and recreate them using Terraform configuration.

Answer

Use terraform plan to detect existing resources and automatically adopt them.

Answer

Write Terraform configuration that matches existing resources and run terraform apply.

Question 5

An organization has a multi-cloud strategy using Terraform. They need to ensure that secrets such as API keys are not stored in plaintext in the configuration files. Which Terraform feature should they use to securely manage sensitive data?

Accepted Answer

Integration with a secrets management tool like Vault. Option E is correct because integrating with a secrets management tool like Vault provides secure storage and retrieval of secrets. Option A (workspaces) separates state but not secrets. Option B (state encryption) protects state but not the source code. Option C (environment variables) still exposes secrets in the execution environment. Option D (sensitive parameter) only masks output, not the source.

Answer

Terraform variable definitions with environment variables

Answer

Terraform workspaces

Answer

Terraform state file encryption

Answer

Terraform's sensitive parameter in output blocks

Question 6

Which TWO of the following are key advantages of using Terraform over manual infrastructure management? (Select TWO.)

Accepted Answer

Consistent and repeatable deployments. Options B and E are correct. Version-controlled infrastructure code enables collaboration and audit trails. Consistent and repeatable deployments reduce errors. Option A is incorrect because Terraform does not auto-discover resources. Option C is not guaranteed. Option D is not a Terraform feature.

Answer

Guaranteed zero downtime during updates

Answer

Automatic discovery of existing resources

Answer

Self-healing infrastructure

Question 7

Which THREE statements accurately describe Terraform state? (Select THREE.)

Accepted Answer

State is used to map real-world resources to configuration.. Options A, B, and D are correct. By default, state is stored locally. Remote backends enable sharing state among team members. State maps real-world resources to configuration for tracking. Option C is false because state may contain sensitive data but not by default—only if resources have sensitive attributes. Option E is false because state locking must be explicitly supported by the backend (e.g., S3 with DynamoDB).

Answer

State contains sensitive data by default.

Answer

State is automatically locked to prevent concurrent modifications.

Question 8

Which TWO of the following are core components of Terraform's workflow? (Select TWO.)

Accepted Answer

terraform init. Options A and C are correct. `terraform init` initializes the working directory, and `terraform plan` creates an execution plan. Option B is not a valid command. Option D (`validate`) is a subcommand but not part of the core workflow (init, plan, apply). Option E (`destroy`) is a separate command, not part of the core provisioning workflow.

Answer

terraform validate

Answer

terraform install

Answer

terraform destroy

Question 9

Refer to the exhibit. A developer runs terraform plan and sees the above output. What will happen when terraform apply is executed?

Accepted Answer

The existing EC2 instance's instance_type is changed to t2.small in-place.. Option B is correct. The plan shows 'updated in-place' with a tilde (~) indicating modification, not recreation. The instance_type will change from t2.micro to t2.small without destroying the instance. Option A describes replacement (force new), which is not indicated. Option C is incorrect because AWS allows in-place modification of instance_type for stopped instances. Option D is incorrect because the plan shows one change.

Answer

The existing EC2 instance is replaced due to a change in instance_type.

Answer

A new EC2 instance is created with instance_type t2.small, and the old one is destroyed.

Answer

No changes will be made because the plan shows an update.

Question 10

Refer to the exhibit. A user attempts to run terraform apply with this configuration. What error will occur?

Accepted Answer

Duplicate resource name "mybucket". Option A is correct. The configuration defines two resources with the same logical name 'mybucket' of the same type (aws_s3_bucket), which is not allowed. Terraform will throw an error about duplicate resource names. Option B is incorrect because the provider is correctly configured. Option C is not the immediate error; if it were allowed, there would be a conflict but not a syntax error. Option D is incorrect because bucket names are valid.

Answer

Conflicting access control settings

Answer

Missing required provider configuration

Answer

Invalid bucket name pattern

Question 11

Refer to the exhibit. A team is troubleshooting a Terraform deployment. What information can be inferred from this state file?

Accepted Answer

There is one EC2 instance of type t2.micro with a dependency on a security group.. Option B is correct. The state indicates one managed resource of type aws_instance named 'web' with instance type t2.micro and a dependency on aws_security_group.web_sg. Option A is incorrect because the dependency is listed. Option C is incorrect because version 1.5.0 is current. Option D is incorrect because the ID is plausible; without further context, we cannot assume it's invalid.

Answer

The Terraform version is outdated and must be upgraded.

Answer

The instance ID is invalid and needs to be recreated.

Answer

The security group dependency was not applied.

Question 12

A company wants to adopt infrastructure as code (IaC) to manage their expanding cloud environment. Which problem does Terraform directly address?

Accepted Answer

Eliminating manual configuration drift across environments. Option A is correct because Terraform provides a declarative way to define and provision infrastructure, ensuring consistency and repeatability. Option B is configuration management, not Terraform's focus. Option C is monitoring, not provisioning. Option D is partly addressed but not the core purpose; Terraform helps with drift detection but not real-time correction.

Answer

Ensuring applications are highly available across regions

Answer

Automating software installation and patching on servers

Answer

Providing real-time monitoring and alerting for infrastructure

Question 13

An organization uses Terraform to deploy resources on AWS. They have separate configuration files for development, staging, and production. To differentiate these environments, they plan to use the same root module with different variable values. Which Terraform feature best supports this use case?

Accepted Answer

Terraform workspaces. Option C is correct. Workspaces allow using the same configuration with separate state files for different environments. Option A (providers) is for different cloud providers, not environments. Option B (modules) organize code but don't inherently separate state. Option D (remote backends) can be used with workspaces but alone don't provide environment separation.

Answer

Terraform modules

Answer

Remote state backends

Answer

Multiple provider configurations

Question 14

A DevOps engineer runs terraform plan and sees that a resource will be destroyed and recreated, but they expected an in-place update. The resource is an AWS EC2 instance with a specific AMI. Which attribute change is most likely causing the destruction?

Accepted Answer

The AMI ID was changed.. Option A is correct. Changing the AMI ID typically forces replacement of an EC2 instance because the underlying image changes. Option B (security groups) can be updated in-place. Option C (tags) are modifiable without replacement. Option D (instance type) can be changed in-place if the instance is stopped (though plan may show in-place); but generally AMI changes force new.

Answer

The security group list was modified.

Answer

The tags were updated.

Answer

The instance type was reduced from large to micro.

Question 15

A new user is learning Terraform. They write a configuration file and run terraform apply expecting to provision resources. However, they forgot to run terraform init first. What will happen?

Accepted Answer

Terraform will return an error stating that the working directory is not initialized.. Option B is correct. Running apply without init will fail because providers and modules are not initialized. Option A is incorrect because init is a prerequisite. Option C is incorrect because terraform validate does not initialize. Option D is incorrect because the failure will prevent any provisioning.

Answer

Terraform will successfully apply the configuration because validate is enough.

Answer

Terraform will automatically run init before applying.

Answer

Terraform will prompt to run init and then continue.

TF-003 Understand Terraform's purpose Practice Test 3 — 15 Questions

Exhibit

TF-003 Understand Terraform's purpose Practice Test 3 — 15 Questions

Exhibit