Question 28 of 519
Use Terraform outside the core workflowhardMultiple ChoiceObjective-mapped

Quick Answer

The answer is to use a remote state data source to read the outputs from a dedicated 'globals' workspace. This approach is correct because the `terraform_remote_state` data source allows one Terraform configuration to securely fetch output values from another configuration’s state file, enabling you to share variables across Terraform configurations without duplicating data. By storing shared networking variables—like allowed IP ranges—in a single, canonical 'globals' workspace, both the AWS and Azure configurations can dynamically consume those values, ensuring consistency and eliminating manual copying. On the HashiCorp Terraform Associate TF-003 exam, this scenario tests your understanding of state management and cross-configuration data sharing; a common trap is to mistakenly choose file-based sharing or hard-coded variables, which violate Terraform’s best practices for remote state. Remember the memory tip: “Remote state reads, duplication recedes”—if you need to share variables across configurations, always reach for `terraform_remote_state`.

TF-003 Use Terraform outside the core workflow Practice Question

This TF-003 practice question tests your understanding of use terraform outside the core workflow. This is a configuration task: choose the command set that satisfies every stated requirement. Small differences — like 'secret' vs 'password' or 'transport input ssh' vs 'all' — change whether the answer is correct. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.

A company uses Terraform to manage multi-cloud infrastructure. They have separate Terraform configurations for AWS and Azure, each with its own state file. They want to share a common set of networking variables (e.g., allowed IP ranges) between these configurations without duplicating data. Which approach best achieves this?

Clue words in this question

Noticing these words before you look at the options changes how you read each choice.

  • Clue: "best"

    Why it matters: Signals that multiple options may be partially correct. Choose the option that most directly solves the exact problem described, not the one that sounds most complete.

Question 1hardmultiple choice
Full question →

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Use a remote state data source to read the outputs from a dedicated 'globals' workspace.

Option D is correct because using a remote state data source allows you to read outputs from a dedicated 'globals' Terraform workspace that stores shared networking variables. This approach avoids data duplication and ensures that both AWS and Azure configurations can dynamically consume the same canonical set of values without manual copying or file sharing. It leverages Terraform's native remote state mechanism to securely and consistently share data across separate configurations.

Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Create a module that contains the variable definitions and reference it in both configurations.

    Why it's wrong here

    Modules package resources and variables, but the values would still need to be passed.

  • Define the variables in a 'terraform.tfvars' file and copy it to each configuration directory.

    Why it's wrong here

    Copying files leads to duplication and synchronization issues.

  • Store the variables in a JSON file and use the 'jsondecode' function in each configuration.

    Why it's wrong here

    This still requires each configuration to read the file, which is duplication of effort.

  • Use a remote state data source to read the outputs from a dedicated 'globals' workspace.

    Why this is correct

    This allows sharing outputs from a single source of truth without duplication.

    Clue confirmation

    The clue word "best" in the question point toward this answer.

    Related concept

    Read the scenario before looking for a memorised answer.

Common exam traps

Common exam trap: answer the scenario, not the keyword

HashiCorp often tests the misconception that modules or variable files can share actual runtime data between separate configurations, when in fact they only define structure or require manual distribution, whereas remote state data sources provide dynamic, centralized sharing without duplication.

Detailed technical explanation

How to think about this question

The remote state data source (terraform_remote_state) works by retrieving the state file from a configured backend (e.g., S3, Azure Storage) and exposing its output values as read-only data. This pattern is often used to create a 'shared configuration' workspace that centralizes common settings like allowed IP ranges, VPC IDs, or resource tags. In real-world scenarios, this approach also supports state locking and versioning, ensuring that all consuming configurations always reference the most recent, consistent values.

KKey Concepts to Remember

  • Read the scenario before looking for a memorised answer.
  • Find the constraint that changes the correct option.
  • Eliminate answers that are true in general but not in this case.

TExam Day Tips

  • Watch for words such as best, first, most likely and least administrative effort.
  • Review why wrong options are wrong, not only why the correct option is correct.

Key takeaway

Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Real-world example

How this comes up in practice

A small business has 20 workstations on the 192.168.1.0/24 network and one public IP from its ISP. The router uses PAT (NAT overload) so all 20 devices share one public address using different source ports. NAT questions test whether you understand the four address terms and which direction each translation applies.

What to study next

Got this wrong? Here's your next step.

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

Related practice questions

Related TF-003 practice-question pages

Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.

Practice this exam

Start a free TF-003 practice session

Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.

FAQ

Questions learners often ask

What does this TF-003 question test?

Use Terraform outside the core workflow — This question tests Use Terraform outside the core workflow — Read the scenario before looking for a memorised answer..

What is the correct answer to this question?

The correct answer is: Use a remote state data source to read the outputs from a dedicated 'globals' workspace. — Option D is correct because using a remote state data source allows you to read outputs from a dedicated 'globals' Terraform workspace that stores shared networking variables. This approach avoids data duplication and ensures that both AWS and Azure configurations can dynamically consume the same canonical set of values without manual copying or file sharing. It leverages Terraform's native remote state mechanism to securely and consistently share data across separate configurations.

What should I do if I get this TF-003 question wrong?

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

Are there clue words in this question I should notice?

Yes — watch for: "best". Signals that multiple options may be partially correct. Choose the option that most directly solves the exact problem described, not the one that sounds most complete.

What is the key concept behind this question?

Read the scenario before looking for a memorised answer.

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Last reviewed: Jun 30, 2026

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

Sign in to join the discussion.

This TF-003 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the TF-003 exam.