TF-004 Understand Terraform's purpose Practice Test 3 — 15 Questions

Question 1

A company has a Terraform configuration that works correctly in us-east-1 but fails in us-west-2 due to resource availability. What is the best way to handle this?

Accepted Answer

Use data sources. Data sources allow Terraform to query the target region for available resources at plan time, enabling dynamic configuration that adapts to regional differences. By using a data source to filter or validate resource availability, the configuration can fail gracefully or select an alternative resource without hardcoding region-specific values.

Answer

Hardcode region in resources

Answer

Use count

Answer

Use provisioners

Question 2

Which TWO are benefits of Terraform's immutable infrastructure approach?

Accepted Answer

Easier rollbacks. Terraform's immutable infrastructure approach replaces entire resources rather than modifying them in-place. This means the previous version of the infrastructure is preserved as a state snapshot, allowing you to roll back by simply reapplying the prior configuration from your version control system. This eliminates the complexity of tracking incremental changes and ensures a clean, predictable rollback process.

Answer

Better performance

Answer

Faster provisioning

Answer

Lower cost

Question 3

Which THREE are considered Terraform's best practices?

Accepted Answer

Use variables to parameterize configurations. A is correct because using variables to parameterize configurations is a core Terraform best practice that enables reusability, flexibility, and separation of concerns. By defining input variables in `variables.tf` and passing values via `terraform.tfvars` or environment variables, you avoid hardcoding values like instance types or region names, making configurations portable across environments (dev, staging, prod). This aligns with Terraform's principle of writing infrastructure as code that is modular and maintainable.

Answer

Use latest version of all modules

Answer

Use provisioners for all software installs

Question 4

Which TWO tasks are better suited for configuration management tools than Terraform?

Accepted Answer

Installing software packages. Installing software packages and configuring web server settings are typical tasks for configuration management tools like Ansible or Puppet, as they operate on existing servers. Terraform, by contrast, is designed for provisioning infrastructure resources such as VPCs, IAM roles, and network ACLs. Therefore, options A and E are correct.

Answer

Managing network ACLs

Answer

Provisioning a VPC

Answer

Creating IAM roles

Question 5

Refer to the exhibit. What does this output indicate?

Accepted Answer

A resource will be modified. The output shows a Terraform plan with a tilde (~) prefix next to a resource attribute, which indicates an in-place update. This means Terraform will modify the existing resource without destroying and recreating it, confirming that option A is correct.

Answer

A resource will be destroyed

Answer

No changes

Answer

A resource will be created

Question 6

Refer to the exhibit. What is the purpose of the data source?

Accepted Answer

To fetch an existing AMI ID. In Terraform, a data source allows you to fetch or compute information from external sources that is not defined within the current configuration. The correct answer is B because the data source in the exhibit (e.g., `aws_ami`) is used to query and retrieve the ID of an existing AMI that matches specified filters, such as name, owner, or tag, without creating a new AMI. This enables dynamic referencing of pre-existing resources in your infrastructure.

Answer

To create a new AMI

Answer

To define a variable

Answer

To output the AMI name

Question 7

Refer to the exhibit. What does this output show?

Accepted Answer

Resources managed by Terraform. The output shows a list of resources that Terraform is currently tracking in its state file. This indicates which resources are under Terraform's management, not just those defined in the configuration or those that are out of sync. Option D is correct because the `terraform state list` command (or similar output) displays all resources that Terraform is actively managing, regardless of their current state relative to the configuration.

Answer

Resources to be created

Answer

Resources in the configuration

Answer

Resources that are out of sync

Question 8

A junior DevOps engineer is asked to explain the primary purpose of Terraform. Which statement best describes Terraform's purpose?

Accepted Answer

Terraform is an infrastructure provisioning tool that manages cloud and on-premises resources using declarative configuration.. Terraform is an infrastructure provisioning tool that uses declarative configuration (HashiCorp Configuration Language, HCL) to define and manage both cloud and on-premises resources. Its primary purpose is to provision infrastructure—such as virtual machines, networks, and storage—across multiple providers (e.g., AWS, Azure, GCP) by maintaining a desired state and applying changes via execution plans. Unlike configuration management or scripting tools, Terraform focuses on the lifecycle of infrastructure resources, not on configuring software within those resources.

Answer

Terraform is a monitoring tool that tracks infrastructure changes.

Answer

Terraform is a scripting tool for automating manual tasks in cloud environments.

Answer

Terraform is a configuration management tool that installs and configures software on servers.

Question 9

A team wants to use Terraform to manage their AWS infrastructure. They have existing resources created manually. What is the recommended approach to bring these resources under Terraform management?

Accepted Answer

Use terraform import to bring each resource into state.. `terraform import` is the recommended approach to bring existing manually created resources under Terraform management. It maps the real-world resource ID into your Terraform state file, allowing Terraform to track and manage it without deleting or recreating it. This preserves the existing infrastructure while enabling future updates via configuration.

Answer

Delete the existing resources and recreate them using Terraform configuration.

Answer

Use terraform plan to detect existing resources and automatically adopt them.

Answer

Write Terraform configuration that matches existing resources and run terraform apply.

Question 10

An organization has a multi-cloud strategy using Terraform. They need to ensure that secrets such as API keys are not stored in plaintext in the configuration files. Which Terraform feature should they use to securely manage sensitive data?

Accepted Answer

Integration with a secrets management tool like Vault. Integrating Terraform with a dedicated secrets management tool like HashiCorp Vault allows sensitive data (e.g., API keys, passwords) to be stored securely and retrieved at runtime via data sources, rather than being hardcoded in plaintext in configuration files. This approach ensures secrets are never written to disk in plaintext, are encrypted in transit and at rest, and can be dynamically rotated without modifying Terraform code.

Answer

Terraform variable definitions with environment variables

Answer

Terraform workspaces

Answer

Terraform state file encryption

Answer

Terraform's sensitive parameter in output blocks

Question 11

Refer to the exhibit. A developer runs terraform plan and sees the above output. What will happen when terraform apply is executed?

Accepted Answer

The existing EC2 instance's instance_type is changed to t2.small in-place.. Terraform's plan output shows an in-place update (indicated by the tilde `~` symbol) for the `instance_type` attribute of the existing EC2 instance. When `terraform apply` is executed, Terraform will modify the instance's type to `t2.small` without destroying and recreating the resource, as the change is supported by the AWS provider for EC2 instances.

Answer

The existing EC2 instance is replaced due to a change in instance_type.

Answer

A new EC2 instance is created with instance_type t2.small, and the old one is destroyed.

Answer

No changes will be made because the plan shows an update.

Question 12

Refer to the exhibit. A user attempts to run terraform apply with this configuration. What error will occur?

Accepted Answer

Duplicate resource name "mybucket". Terraform requires every resource block to have a unique address within the same module. If two `aws_s3_bucket` resources both use the same logical name `mybucket`, Terraform will reject the configuration with a `Duplicate resource name` error during the `plan` or `apply` phase. This is a fundamental rule of Terraform's configuration language, enforced at parse time before any provider interaction occurs.

Answer

Conflicting access control settings

Answer

Missing required provider configuration

Answer

Invalid bucket name pattern

Question 13

Refer to the exhibit. A team is troubleshooting a Terraform deployment. What information can be inferred from this state file?

Accepted Answer

There is one EC2 instance of type t2.micro with a dependency on a security group.. The state file explicitly shows a resource of type `aws_instance` with `instance_type = "t2.micro"` and a `depends_on` meta-argument referencing `aws_security_group.example`. This indicates that Terraform recorded the EC2 instance as created with a t2.micro type and that it has a formal dependency on a security group resource, ensuring the security group is created before the instance during apply.

Answer

The Terraform version is outdated and must be upgraded.

Answer

The instance ID is invalid and needs to be recreated.

Answer

The security group dependency was not applied.

Question 14

A company wants to adopt infrastructure as code (IaC) to manage their expanding cloud environment. Which problem does Terraform directly address?

Accepted Answer

Eliminating manual configuration drift across environments. Terraform directly addresses the problem of manual configuration drift by enabling infrastructure as code (IaC), where the entire infrastructure state is defined in declarative configuration files. It uses a desired-state model: Terraform compares the current state of resources against the configuration and automatically reconciles any differences, ensuring environments remain consistent and drift is eliminated without manual intervention.

Answer

Ensuring applications are highly available across regions

Answer

Automating software installation and patching on servers

Answer

Providing real-time monitoring and alerting for infrastructure

Question 15

An organization uses Terraform to deploy resources on AWS. They have separate configuration files for development, staging, and production. To differentiate these environments, they plan to use the same root module with different variable values. Which Terraform feature best supports this use case?

Accepted Answer

Terraform workspaces. Terraform workspaces allow you to manage multiple distinct state files within a single configuration directory, enabling you to use the same root module with different variable values for development, staging, and production environments. Each workspace maintains its own state data, so you can apply the same configuration to different environments by switching workspaces and providing environment-specific variable values.

Answer

Terraform modules

Answer

Remote state backends

Answer

Multiple provider configurations