Courseiva
Use Terraform outside the core workflowmediumMultiple ChoiceObjective-mapped

TF-004 Use Terraform outside the core workflow Practice Question

Exhibit

Sentinel policy "restrict-instance-types" evaluation resulted in "failure".
Description: Instance types must be t2.micro or t2.small.

Refer to the exhibit. A Terraform Cloud plan includes an EC2 instance of type 't2.medium'. The team uses Sentinel policies. Which action should they take to proceed?

⚠ Common exam trap

HashiCorp often tests the misconception that Sentinel policies can always be overridden or disabled, but the trap here is that hard-mandatory policies require configuration changes, not workarounds, and candidates must recognize that modifying the policy or bypassing the check violates the governance model.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Change the instance type in the configuration to t2.micro or t2.small.

Sentinel policies enforce compliance rules, and if the policy explicitly denies 't2.medium', the team must modify their configuration to use an allowed instance type (e.g., t2.micro or t2.small) to pass the policy check. This aligns with the principle of infrastructure-as-code where policies are immutable guardrails, and the configuration must be adapted to meet them rather than bypassing the policy.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Modify the Sentinel policy to allow t2.medium.

    Why it's wrong here

    Policy changes may require review.

  • Disable the policy check for this run.

    Why it's wrong here

    Disabling undermines governance.

  • Change the instance type in the configuration to t2.micro or t2.small.

    Why this is correct

    Comply with the policy.

  • Override the policy in the run using Terraform Cloud UI.

    Why it's wrong here

    Overriding may not be permitted.

About these practice questions

One of 428 original TF-004 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This TF-004 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the TF-004 exam.