Match each Terraform cloud/enterprise feature to its purpose.
Drag a concept onto its matching description — or click a concept then click the description.
Organize state and runs for different environments
Integrate third-party policy or compliance checks
Policy as code framework for governance
Store state securely in Terraform Cloud
Trigger runs automatically from version control
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Workspaces: Manage multiple environments with separate state and variables.
Workspaces isolate state and variables per environment, Sentinel enforces policies, and Run Tasks integrate third-party tools. Common confusions include mixing the roles of Workspaces and Remote State, or Sentinel with Workspaces.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Workspaces: Manage multiple environments with separate state and variables.
Why this is correct
Terraform Cloud Workspaces are designed to manage distinct infrastructure environments, such as development, staging, and production, by providing isolated configurations. Each workspace maintains its own remote state file, ensuring that resource changes in one environment do not inadvertently affect another. Furthermore, workspaces allow for separate variable sets, enabling environment-specific parameterization without modifying the core Terraform configuration.
Sentinel: Enforce policy as code to govern infrastructure provisioning.
Why this is correct
Sentinel is HashiCorp's policy-as-code framework, purpose-built for enforcing governance rules on infrastructure provisioning within Terraform Cloud/Enterprise. It allows organizations to define granular, logic-based policies that automatically validate Terraform plans and applies. This ensures compliance with security, cost, and operational best practices before any infrastructure changes are deployed, preventing unauthorized or non-compliant modifications.
Run Tasks: Integrate third-party tools at specific points in the Terraform run lifecycle.
Why this is correct
Run Tasks provide critical integration points within the Terraform Cloud run lifecycle, allowing external services and third-party tools to interact with the infrastructure provisioning process. These tasks can be configured to execute at specific phases, such as pre-plan, post-plan, pre-apply, or post-apply. This enables automated security scanning, compliance checks, custom notifications, or data synchronization with external systems, enhancing automation and validation workflows.
Workspaces: Store and share remote state files for collaboration.
Why it's wrong here
This statement is incorrect because while Terraform Cloud Workspaces *utilize* remote state to store and share state files, their primary purpose extends beyond mere storage and collaboration. The fundamental role of a workspace is to encapsulate and manage a distinct infrastructure environment, complete with its own isolated state, variables, and run history. Remote state itself is the underlying mechanism for storing and sharing, which workspaces leverage for environment separation.
Sentinel: Provide collaborative infrastructure management with separate environments.
Why it's wrong here
This statement incorrectly attributes the functionality of Workspaces to Sentinel. Sentinel's core function is policy enforcement and governance, ensuring that infrastructure changes adhere to predefined rules and standards. It does not provide mechanisms for collaborative infrastructure management or the creation of separate environments; those capabilities are specifically offered by Terraform Cloud Workspaces, which segment state and variables for distinct deployments.
Go deeper
About these practice questions
This TF-004 question is part of Courseiva's 428-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This TF-004 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the TF-004 exam.