TF-004 Understand Terraform's purpose Practice Test 4 — 15 Questions

Question 1

A new user is learning Terraform. They write a configuration file and run terraform apply expecting to provision resources. However, they forgot to run terraform init first. What will happen?

Accepted Answer

Terraform will return an error stating that the working directory is not initialized.. Terraform requires the working directory to be initialized with `terraform init` before any plan or apply can be executed. The `init` command downloads the necessary provider plugins and sets up the backend state storage. Without it, Terraform has no knowledge of the providers or state configuration, so it returns an error stating that the working directory is not initialized.

Answer

Terraform will successfully apply the configuration because validate is enough.

Answer

Terraform will automatically run init before applying.

Answer

Terraform will prompt to run init and then continue.

Question 2

A team uses a remote backend (S3) with state locking via DynamoDB. One team member runs terraform apply and it fails mid-way. Another team member immediately tries to run terraform plan. What is likely to happen?

Accepted Answer

The plan will fail with an error indicating the state is locked.. Terraform's remote backend with DynamoDB state locking acquires a lock at the start of `terraform apply` and does not release it until the operation completes or is explicitly unlocked. If the apply fails mid-way, the lock remains held (it is not automatically released on failure). Therefore, when another team member immediately runs `terraform plan`, the plan command will attempt to acquire the lock, fail, and return an error indicating the state is locked.

Answer

The plan will run successfully because the lock is automatically released after failure.

Answer

The plan will run but the state file will be corrupted.

Answer

The plan will run successfully and show any partial changes.

Question 3

An organization has multiple teams using Terraform to manage shared infrastructure. They want to enforce policies such as requiring specific tags on all resources and preventing the use of certain instance types. Which Terraform feature should they implement to meet these requirements?

Accepted Answer

Sentinel policy enforcement. Sentinel is HashiCorp's policy-as-code framework that integrates with Terraform Cloud and Enterprise to enforce fine-grained, logic-based policies before resources are created or modified. It can mandate that all resources carry specific tags (e.g., `required_tags`) and block prohibited instance types (e.g., `t2.micro`) by evaluating Terraform plan output against Sentinel rules, making it the correct choice for these governance requirements.

Answer

Terraform workspaces

Answer

Custom Terraform providers

Answer

Remote backends with state locking

Question 4

A team wants to manage infrastructure across multiple cloud providers using a single tool that supports infrastructure as code. Which tool is best suited for this purpose?

Accepted Answer

Terraform. Terraform is the best choice because it is a cloud-agnostic Infrastructure as Code (IaC) tool that uses a declarative configuration language (HCL) to manage resources across multiple providers (e.g., AWS, Azure, GCP) through a single workflow. Unlike provider-specific tools, Terraform's provider plugin architecture allows it to abstract away API differences, enabling consistent state management and provisioning across heterogeneous environments.

Answer

Ansible

Answer

AWS CloudFormation

Answer

Chef

Question 5

A team has been manually modifying cloud resources outside of Terraform. They now find that Terraform plans show changes that don't match their expectations. What core concept of Terraform's purpose does this situation violate?

Accepted Answer

Declarative configuration with desired state. Terraform's core purpose is to manage infrastructure through a declarative configuration that defines the desired state. When users manually modify cloud resources outside of Terraform, the actual state diverges from the desired state defined in the configuration. Terraform detects this drift and plans changes to reconcile the actual state back to the desired state, which may include unexpected modifications or deletions. This violates the fundamental principle that Terraform should be the single source of truth for infrastructure state.

Answer

Idempotency

Answer

Immutable infrastructure

Answer

Procedural scripting

Question 6

An organization is evaluating Terraform for managing interconnected resources that must be created in a specific order. Why is Terraform's dependency graph handling a key aspect of its purpose?

Accepted Answer

It ensures resources are provisioned in the correct order based on dependencies. Terraform builds a dependency graph from the resource configurations, analyzing explicit references (e.g., `aws_instance.web.vpc_id`) and implicit dependencies. This graph ensures that resources are created, updated, or destroyed in the correct order, preventing provisioning failures that would occur if, for example, a subnet were created before its parent VPC. This deterministic ordering is fundamental to Terraform's ability to manage complex, interconnected infrastructure reliably.

Answer

It reduces the amount of code needed

Answer

It allows all resources to be created in parallel for speed

Answer

It enables modularity and code reuse

Question 7

Which TWO statements best describe Terraform's purpose? (Choose two.)

Accepted Answer

It uses a declarative language.. Terraform uses a declarative language (HCL) where you define the desired end state of your infrastructure, and Terraform determines the necessary steps to achieve that state. This is a core differentiator from imperative tools, as it focuses on 'what' rather than 'how'.

Answer

It is a configuration management tool.

Answer

It is designed for single-cloud environments.

Answer

It requires a master node to manage agents.

Question 8

Which THREE are part of Terraform's core workflow? (Choose three.)

Accepted Answer

Apply. Terraform's documented core workflow consists of three steps: Write, Plan, and Apply. Option E (Write) is correct because it is the first phase, where you author infrastructure as code in HashiCorp Configuration Language (HCL) in .tf files. Option C (Plan) is correct because it is the second phase, where `terraform plan` produces an execution plan showing the actions Terraform will take to reach the desired state. Option A (Apply) is correct because it is the third phase, where `terraform apply` executes the planned changes to provision or modify real infrastructure. Option B (Import) is not part of the core workflow; `terraform import` is a supplementary command used to bring existing resources under Terraform management. Option D (Destroy) is not one of the three core workflow phases either; `terraform destroy` is a convenience command that applies a plan to remove all managed infrastructure, but it is not counted among Write, Plan, and Apply.

Answer

Import

Answer

Destroy

Question 9

A developer is new to infrastructure as code and wants to deploy a simple web server on AWS using a tool that allows them to define the infrastructure in a reusable and version-controlled manner. They are considering using the AWS Management Console, AWS CLI, or Terraform. Which course of action aligns best with Terraform's purpose?

Accepted Answer

Use Terraform to define the web server in a .tf file and run terraform apply.. Terraform's core purpose is to allow infrastructure to be defined declaratively in configuration files (typically .tf files) that can be version-controlled, shared, and reused. Writing the web server definition in a .tf file and running `terraform apply` follows this declarative, code-based workflow, enabling repeatable and auditable deployments. This aligns with infrastructure as code (IaC) principles, unlike manual or imperative approaches.

Answer

Use the AWS Management Console to manually create the web server.

Answer

Write a shell script using the AWS CLI to provision resources.

Answer

Use Terraform but only with local state and no version control.

Question 10

A team has been managing their AWS infrastructure using a collection of Bash scripts that create resources in a specific order. They frequently encounter issues where resources are created out of order or not properly cleaned up. They want to adopt a more reliable approach that ensures consistent provisioning and teardown. Which action best aligns with Terraform's purpose?

Accepted Answer

Convert the scripts into Terraform configuration files and use remote state.. Terraform's core purpose is to provide declarative, idempotent infrastructure as code with a state file that tracks resource dependencies and enables consistent provisioning and teardown. Converting the Bash scripts to Terraform configuration files directly addresses the ordering and cleanup issues because Terraform builds a dependency graph and applies changes in the correct order. Using remote state (e.g., S3 backend with DynamoDB locking) ensures the state is shared, consistent, and protected from loss, which is essential for team collaboration and reliable teardown.

Answer

Continue using the Bash scripts but add more error handling.

Answer

Use Terraform but only store state locally on the lead engineer's machine.

Answer

Rewrite the scripts as Ansible playbooks for provisioning.

Question 11

A company uses AWS CloudFormation for AWS resources and Azure Resource Manager for Azure resources. They want to standardize on a single tool that can manage resources across both clouds with a consistent workflow and support for infrastructure as code. They also want to ensure that their infrastructure can be version-controlled and reviewed. Which approach best fulfills Terraform's purpose?

Accepted Answer

Use Terraform with the AWS and Azure providers to manage all resources.. Terraform is a cloud-agnostic infrastructure as code tool that uses providers to interact with multiple cloud APIs. By configuring both the AWS and Azure providers, Terraform can manage resources across both clouds using a single, consistent workflow and HCL configuration. This enables version control and code review of the infrastructure definitions, fulfilling the company's requirements.

Answer

Use a custom Python script that calls both cloud APIs.

Answer

Continue using CloudFormation for AWS and Resource Manager for Azure.

Answer

Migrate all resources to a single cloud provider to simplify management.

Question 12

A DevOps team accidentally deleted their Terraform state file. The actual infrastructure (EC2 instances, security groups, etc.) is still running and unchanged. They have the Terraform configuration files that were used to create the infrastructure. They want to re-establish management of the existing infrastructure without recreating it. Which course of action aligns with Terraform's purpose?

Accepted Answer

Use terraform import for each resource to bring them into the state file.. terraform import is the supported mechanism to bring existing resources under Terraform management by writing their real-world attributes into the state file, without destroying or recreating them. Since the configuration files already exist and match the infrastructure, importing each resource re-establishes the mapping between config and state. After import, terraform plan should show no changes if the config matches reality.

Answer

Delete all existing infrastructure and run terraform apply to recreate it.

Answer

Manually edit the configuration to match the existing resources exactly, then run terraform apply.

Answer

Run terraform plan to generate a new state file automatically.

Question 13

Which TWO statements accurately describe key purposes of Terraform?

Accepted Answer

Terraform enables declarative infrastructure provisioning.. Option A is correct because Terraform uses a declarative HashiCorp Configuration Language (HCL) model where you define the desired end state of infrastructure and Terraform computes the create/update/delete actions needed to reach it, rather than scripting imperative steps. Option D is correct because Terraform's provider plugin architecture (e.g., aws, azurerm, google, kubernetes) lets a single configuration and workflow target multiple clouds and services simultaneously, which is a core design purpose. Option B is wrong because Terraform itself has no built-in security scanning; that requires separate tools such as tfsec, Checkov, or Sentinel policies. Option C is wrong because Terraform is an infrastructure provisioning tool, not a CI/CD pipeline engine; it is typically invoked by pipelines (Jenkins, GitHub Actions, GitLab CI) rather than replacing them. Option E is wrong because Terraform's model is fundamentally immutable/declarative resource replacement, and while it can manage mutable resources via providers, 'manages both mutable and immutable infrastructure' is not a stated key purpose in the same way as A and D.

Answer

Terraform provides built-in security scanning.

Answer

Terraform automates continuous delivery pipelines.

Answer

Terraform manages both mutable and immutable infrastructure.

Question 14

Refer to the exhibit. What is the primary purpose of the version constraint '~> 4.0'?

Accepted Answer

Allows any version in the 4.0 range including patch updates.. The version constraint '~> 4.0' uses the pessimistic version constraint operator in Terraform. It allows any version in the 4.x range, meaning versions >= 4.0 and < 5.0, including patch updates like 4.1, 4.2, etc. Therefore, option A is correct. Option B is incorrect because '= 4.0' would pin to only exact 4.0. Option C is incorrect because it includes 5.0, which is not allowed. Option D is incorrect because it allows any version 4.0 or higher, including 5.0 and beyond, which is too broad.

Answer

Allows only exact version 4.0.

Answer

Allows versions 4.0 through 5.0.

Answer

Allows any version 4.0 or higher.

Question 15

A platform team currently provisions servers by filing tickets that an operations group fulfills manually over several days. Leadership wants developers to describe the desired end state of that infrastructure in version-controlled files so the tooling itself figures out which resources to create, modify, or remove. Which characteristic of Terraform directly supports this goal?

Accepted Answer

Terraform is declarative, so you define the desired end state and it computes the actions needed to reach it.. The team needs files that describe the intended end state of infrastructure rather than a manual sequence of provisioning steps. A declarative configuration language fits that need because Terraform compares desired state with recorded state, builds a dependency graph, and produces an execution plan of create, update, and destroy actions. Procedural scripting, embedded credentials, and host-installed agents do not deliver that outcome.

Answer

Terraform stores credentials in the configuration so provisioning runs unattended.

Answer

Terraform applies changes through a configuration management agent installed on each managed host.

Answer

Terraform is procedural, so engineers write ordered scripts that call each provider API in sequence.