TF-003 Implement and maintain state Practice Test 2 — 15 Questions

Question 1

A team is using a shared backend for Terraform state. After running terraform apply, the state file is locked for an extended period, causing other team members to fail with 'Error acquiring the state lock'. What is the most likely cause?

Accepted Answer

A previous terraform apply command was interrupted or crashed, leaving a stale lock.. Option A is correct because Terraform uses a locking mechanism (typically via DynamoDB for AWS S3 backends) to prevent concurrent state modifications. If a `terraform apply` is interrupted or crashes, the lock may not be released, leaving a stale lock entry. This causes subsequent operations to fail with 'Error acquiring the state lock' until the lock is manually removed or expires (if TTL is configured).

Answer

Another team member is actively running terraform apply on the same state.

Answer

The backend configuration was changed without running terraform init.

Answer

The state file contains resources that no longer exist in the cloud provider.

Question 2

Which THREE actions should be taken when migrating Terraform state from local to a remote backend?

Accepted Answer

Run terraform init to initialize the backend and migrate state.. Option B is correct because `terraform init` is the command that initializes the backend configuration and, when a backend block is added to the configuration, automatically prompts to migrate the existing local state file to the new remote backend. This command handles the state migration seamlessly without requiring manual intervention, ensuring the state file is copied and the backend is configured correctly.

Answer

Remove the local state file before running terraform init.

Answer

Manually import all existing resources into the remote state.

Question 3

Which four of the following statements about Terraform state management are correct? (Choose all that apply. There are four correct answers.)

Accepted Answer

The `terraform state rm` command can be used to remove a resource from state without destroying the real infrastructure.. Remote state backends like S3 or Azure Storage support state locking (via DynamoDB or Azure Blob lease) to prevent concurrent modifications, ensuring consistency. The `terraform state rm` command removes a resource from state without destroying the real infrastructure, which is useful for detaching management. Encrypting the state backend at rest (e.g., S3 server-side encryption or Azure Storage encryption) protects sensitive data like passwords or keys stored in the state file. The `terraform import` command updates the state file to include an existing resource, allowing Terraform to take over its management without recreating it.

Answer

The `terraform state list` command can modify the state file to rename a resource.

Answer

Terraform automatically backs up the previous state file every time a new state is written.

Question 4

Drag and drop the steps to use Terraform modules from the registry in the correct order.

Question 5

Match each Terraform state command to its action.

Question 6

A company uses Terraform with an S3 backend. A user accidentally deletes the state file. What is the best practice to recover the state?

Accepted Answer

Restore the state file from S3 bucket versioning. Using S3 versioning is the best practice because it allows you to restore the previous version of the state file. Other options, such as relying on local caches or re-importing resources, are not reliable or efficient.

Answer

Use terraform state pull from the local cache

Answer

Use terraform import on all resources

Answer

Recreate the state from a terraform plan

Answer

Restore from the local terraform.tfstate.backup

Question 7

A developer runs `terraform apply` and receives the error: 'Error acquiring the state lock'. Another engineer is currently running `terraform plan`. What should the developer do?

Accepted Answer

Wait for the lock to be released automatically. The safest action is to wait for the lock to be released. Force-unlocking without proper cause can corrupt the state, and disabling locks can cause concurrency issues.

Answer

Run terraform init to reinitialize the backend

Answer

Run terraform force-unlock with the lock ID

Answer

Run terraform plan with -lock=false to bypass the lock

Answer

Delete the lock file from the S3 bucket

Question 8

In a CI/CD pipeline, Terraform state is stored in Terraform Cloud. A pipeline run fails with the error: 'State version conflict'. What is the most likely cause?

Accepted Answer

Missing or incorrect backend configuration. A state version conflict typically occurs when two runs attempt to modify the state simultaneously, even if Terraform Cloud serializes runs. This can happen if a run is triggered while another is still in progress.

Answer

Authentication failure with Terraform Cloud

Answer

State file exceeds maximum size limit

Answer

Terraform version mismatch between local and remote

Answer

Two runs started at the same time

Question 9

An organization uses a shared remote backend. They want to prevent concurrent apply operations that could corrupt the state. What built-in mechanism does Terraform provide?

Accepted Answer

State locking. Terraform uses state locking to prevent concurrent writes. When one operation holds the lock, others must wait or fail. This is built-in for supported backends.

Answer

File permissions on the remote state file

Answer

Workspace isolation

Answer

State locking

Answer

Backend versioning

Question 10

After running `terraform state mv` to rename a resource, the resource's state binding is lost and the resource cannot be managed. Which command should be run to restore the state binding?

Accepted Answer

terraform import. If a resource's state is missing after a state operation, `terraform import` can re-import the resource into state. The other commands do not restore state binding.

Answer

terraform state push

Answer

terraform state show

Answer

terraform state rm

Answer

terraform import

Question 11

What is the purpose of the `terraform state list` command?

Accepted Answer

List all resources in the current state file. `terraform state list` lists all resources currently tracked in the state file. It does not show configuration or future plans.

Answer

List all resources in the current state file

Answer

List all resources defined in the Terraform configuration

Answer

List all available workspaces

Answer

List all providers used in the configuration

Question 12

A user wants to inspect the current attributes of a specific resource in the Terraform state. Which command should they use?

Accepted Answer

terraform state show . `terraform state show ` displays the attributes and metadata of a specific resource as stored in the state.

Answer

terraform state list <resource>

Answer

terraform output

Answer

terraform plan

Answer

terraform show

Question 13

A team uses a Consul backend for Terraform state. They want to encrypt state at rest. What should they do?

Accepted Answer

Enable encryption in the backend configuration using the `encrypt` argument. The Consul backend supports an `encrypt` argument that can be set to true to enable encryption at rest within Consul.

Answer

Store state in an encrypted S3 bucket instead

Answer

Use Terraform's built-in state encryption feature

Answer

It is not possible to encrypt state with the Consul backend

Answer

Use Vault Transit Engine to encrypt the state before storing

Question 14

Which of the following is NOT a valid backend type for storing Terraform state?

Accepted Answer

kubernetes. The official Terraform backends include s3, local, http, and terraform cloud. Kubernetes is not a standard backend type.

Answer

terraform cloud

Answer

local

Answer

s3

Answer

http

Question 15

Which THREE of the following are valid strategies to migrate Terraform state from a local backend to a remote backend?

Accepted Answer

Manually copy the local state file to the remote backend storage. The valid strategies are: change backend config and run `terraform init -reconfigure`, manually copy the state file to the remote location, or use `terraform init -migrate-state`. Other options are not appropriate for state migration.

Answer

Use terraform import for each resource

Answer

Use the terraform state push command