TF-004 Understand IaC concepts Practice Question
Which TWO statements about Infrastructure as Code (IaC) are correct?
⚠ Common exam trap
HashiCorp often tests the misconception that IaC eliminates drift entirely, when in reality it only detects and corrects drift through reconciliation, and candidates may also incorrectly assume IaC is cloud-only, missing its applicability to on-premises and hybrid environments.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
IaC enables automated provisioning and management of infrastructure.
Infrastructure as Code (IaC) automates the provisioning and management of infrastructure through machine-readable definition files, enabling consistent and repeatable deployments without manual intervention. Tools like Terraform use a declarative approach to define resources, and the IaC engine handles creation, modification, and deletion based on the desired state. Option D is correct because IaC configurations are idempotent—applying the same configuration multiple times yields the same result. This is achieved through state management and drift detection, ensuring that infrastructure remains in the specified state regardless of how many times the configuration is applied.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
IaC is only applicable to cloud-based infrastructure.
Why it's wrong here
This statement is incorrect because Infrastructure as Code (IaC) principles and tools are designed to manage infrastructure across various environments, not exclusively cloud-based ones. Many IaC solutions, including Terraform, support providers for on-premises virtualization platforms like VMware vSphere, network devices, and even bare-metal servers, facilitating hybrid cloud strategies. The core benefit of declarative configuration applies universally to any programmable infrastructure, regardless of its hosting location.
- ✗
IaC eliminates configuration drift entirely.
Why it's wrong here
While Infrastructure as Code significantly mitigates configuration drift by defining desired states and enabling automated reconciliation, it does not entirely eliminate it. Manual, out-of-band changes made directly to infrastructure components can still occur, causing the actual state to diverge from the declared IaC state. Continuous application of IaC configurations and robust change management processes are necessary to detect and correct drift, rather than preventing its possibility altogether.
- ✓
IaC enables automated provisioning and management of infrastructure.
Why this is correct
This statement is correct because a primary advantage of Infrastructure as Code is its ability to automate the entire lifecycle of infrastructure resources, from initial provisioning to ongoing management and eventual deprovisioning. By defining infrastructure in machine-readable files, IaC tools can interpret these definitions and automatically interact with underlying APIs to create, update, and destroy resources without manual intervention. This automation drastically reduces human error and accelerates deployment cycles.
- ✓
IaC allows the same configuration to be applied multiple times with the same result.
Why this is correct
This statement is correct, describing the crucial property of idempotency inherent in most Infrastructure as Code tools. Idempotency ensures that applying the same IaC configuration multiple times will consistently yield the identical infrastructure state, regardless of the initial state or how many times it has been applied. The tools intelligently determine necessary changes, creating resources if they don't exist, updating them if they differ, and doing nothing if they already match the desired state.
- ✗
IaC tools require manual execution of scripts.
Why it's wrong here
This statement is incorrect because IaC tools are specifically designed to integrate seamlessly into automated workflows, such as Continuous Integration/Continuous Deployment (CI/CD) pipelines. While manual execution of IaC commands is possible for development or testing, the true power and efficiency of IaC are realized when its configurations are automatically applied by a system upon code commits or scheduled events. This automation eliminates the need for manual script execution in production environments, ensuring consistency and speed.
Go deeper
Related to this question
About these practice questions
This TF-004 question is part of Courseiva's 428-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This TF-004 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the TF-004 exam.