TF-004 Understand Terraform's purpose Practice Question
Which TWO tasks are better suited for configuration management tools than Terraform?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Installing software packages
Installing software packages and configuring web server settings are typical tasks for configuration management tools like Ansible or Puppet, as they operate on existing servers. Terraform, by contrast, is designed for provisioning infrastructure resources such as VPCs, IAM roles, and network ACLs. Therefore, options A and E are correct.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Installing software packages
Why this is correct
Installing software packages on a server is a classic use case for configuration management tools such as Ansible, Chef, or Puppet. These tools excel at defining the desired state of an operating system, including which packages should be present, their versions, and ensuring they are installed idempotently. While Terraform provisions the underlying virtual machine, it does not typically manage the granular, post-provisioning software lifecycle within the guest OS.
- ✗
Managing network ACLs
Why it's wrong here
Managing network Access Control Lists (ACLs) is a task inherently suited for Infrastructure as Code (IaC) tools like Terraform. Network ACLs define stateless packet filtering rules at the subnet level, which are declarative infrastructure components. Terraform's providers interact directly with cloud APIs to create, update, and delete these resources, ensuring the network security posture is consistently applied and version-controlled alongside other network infrastructure.
- ✗
Provisioning a VPC
Why it's wrong here
Provisioning a Virtual Private Cloud (VPC) is a fundamental task for which Terraform is exceptionally well-suited. A VPC represents a logically isolated section of a cloud, defining its IP address range, subnets, and routing tables. Terraform's declarative approach allows users to define the entire network topology as code, enabling the creation, modification, and destruction of this foundational cloud infrastructure in a repeatable and auditable manner.
- ✗
Creating IAM roles
Why it's wrong here
Creating Identity and Access Management (IAM) roles is a critical infrastructure task that Terraform handles efficiently. IAM roles are cloud-native resources that define permissions for entities to interact with other cloud services. Terraform's cloud provider integrations allow for the declarative definition and management of these security-sensitive resources, ensuring that access policies are consistently applied and version-controlled as part of the overall infrastructure deployment.
- ✓
Configuring web server settings
Why this is correct
Configuring specific settings for an application, such as web server parameters (e.g., Apache virtual hosts, Nginx server blocks), is a prime candidate for configuration management tools. After Terraform provisions the underlying server, tools like Puppet or SaltStack can then idempotently apply detailed application-level configurations, manage service states, and ensure consistency across multiple instances. This separation of concerns allows Terraform to focus on infrastructure, while CM tools manage the software layer.
Go deeper
Related to this question
About these practice questions
One of 428 original TF-004 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This TF-004 practice question is part of Courseiva's free HashiCorp certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the TF-004 exam.