[Nov 23, 2025] Valid Terraform-Associate-003 Test Answers & HashiCorp Terraform-Associate-003 Exam PDF
Realistic Terraform-Associate-003 Exam Dumps with Accurate & Updated Questions
HashiCorp Terraform-Associate-003 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
NEW QUESTION # 14
What is the workflow for deploying new infrastructure with Terraform?
- A. Write Terraform configuration, run terraform show to view proposed changes, and terraform apply to create new infrastructure
- B. Write Terraform configuration, run terraform plan to initialize the working directory or workspace, and terraform apply to create the infrastructure
- C. Write Terraform configuration, run terraform apply to create infrastructure, use terraform validate to confirm Terraform deployed resources correctly
- D. Write Terraform configuration, run terraform init to initialize the working directory or workspace, and run terraform apply
Answer: D
Explanation:
This is the workflow for deploying new infrastructure with Terraform, as it will create a plan and apply it to the target environment. The other options are either incorrect or incomplete.
NEW QUESTION # 15
How can terraform plan aid in the development process?
- A. Formats your Terraform configuration files
- B. Validates your expectations against the execution plan without permanently modifying state
- C. Reconciles Terraform's state against deployed resources and permanently modifies state using the current status of deployed resources
- D. Initializes your working directory containing your Terraform configuration files
Answer: B
Explanation:
The terraform plan command is used to create an execution plan. It allows you to see what actions Terraform will take to reach the desired state defined in your configuration files. It evaluates the current state and configuration, showing a detailed outline of the resources that will be created, updated, or destroyed. This is a critical step in the development process as it helps you verify that the changes you are about to apply will perform as expected, without actually modifying any state or infrastructure.
References:
Terraform documentation on terraform plan: Terraform Plan
NEW QUESTION # 16
Which of the following statements about Terraform modules is not true?
- A. A module is a container for one or more resources
- B. Modules can call other modules
- C. You can call the same module multiple times
- D. Modules must be publicly accessible
Answer: D
Explanation:
This is not true, as modules can be either public or private, depending on your needs and preferences. You can use the Terraform Registry to publish and consume public modules, or use Terraform Cloud or Terraform Enterprise to host and manage private modules.
NEW QUESTION # 17
You used Terraform to create an ephemeral development environment in the cloud and are now ready to destroy all the infrastructure described by your Terraform configuration. To be safe, you would like to first see all the infrastructure that Terraform will delete.
Which command should you use to show all the resources that will be deleted? (Pick the 2 correct responses)
- A. Run terraform state rm *.
- B. Run terraform destroy. This will output all the resources that will be deleted before prompting for approval.
- C. Run terraform show -destroy.
Answer: B,C
Explanation:
Running terraform destroy will show all resources that will be deleted before prompting for approval. You can also run terraform plan -destroy to simulate the destruction without actually applying it, which is useful for reviewing the planned changes.
References:
Terraform Destroy
NEW QUESTION # 18
The Terraform binary version and provider versions must match each other in a single configuration.
- A. True
- B. False
Answer: B
Explanation:
The Terraform binary version and provider versions do not have to match each other in a single configuration. Terraform allows you to specify provider version constraints in the configuration's terraform block, which can be different from the Terraform binary version1. Terraform will use the newest version of the provider that meets the configuration's version constraints2. You can also use the dependency lock file to ensure Terraform is using the correct provider version3.
References =
* 1: Providers - Configuration Language | Terraform | HashiCorp Developer
* 2: Multiple provider versions with Terraform - Stack Overflow
* 3: Lock and upgrade provider versions | Terraform - HashiCorp Developer
NEW QUESTION # 19
Why would you use the -replace flag for terraform apply?
- A. You want to force Terraform to destroy a resource on the next apply
- B. You want Terraform to ignore a resource on the next apply
- C. You want Terraform to destroy all the infrastructure in your workspace
- D. You want to force Terraform to destroy and recreate a resource on the next apply
Answer: D
Explanation:
The-replaceflag is used with theterraform applycommand when there is a need to explicitly force Terraform to destroy and then recreate a specific resource during the next apply. This can be necessary in situations where a simple update is insufficient or when a resource must be re-provisioned to pick up certain changes.
NEW QUESTION # 20
What value does the Terraform Cloud private registry provide over the public Terraform Module Registry?
- A. The ability to share modules with public Terraform users and members of Terraform Cloud Organizations
- B. The ability to tag modules by version or release
- C. The ability to restrict modules to members of Terraform Cloud or Enterprise organizations
- D. The ability to share modules publicly with any user of Terraform
Answer: C
Explanation:
The Terraform Cloud private registry provides the ability to restrict modules to members of Terraform Cloud or Enterprise organizations. This allows you to share modules within your organization without exposing them to the public. The private registry also supports importing modules from your private VCS repositories. The public Terraform Module Registry, on the other hand, publishes modules from public Git repositories and makes them available to any user of Terraform.
References = : Private Registry - Terraform Cloud : Terraform Registry - Provider Documentation
NEW QUESTION # 21
Terraformrequiresthe Go runtime as a prerequisite for installation.
- A. True
- B. False
Answer: B
Explanation:
* Terraformis written in Go, but it isdistributed as a standalone binaryanddoes notrequire the Go runtime.
* Users do not need to install Go to run Terraform.
Official Terraform Documentation Reference:
Terraform Install Guide
NEW QUESTION # 22
You should run terraform fnt to rewrite all Terraform configurations within the current working directory to conform to Terraform-style conventions.
- A. True
- B. False
Answer: A
Explanation:
Explanation
You should run terraform fmt to rewrite all Terraform configurations within the current working directory to conform to Terraform-style conventions. This command applies a subset of the Terraform language style conventions, along with other minor adjustments for readability. It is recommended to use this command to ensure consistency of style across different Terraform codebases. The command is optional, opinionated, and has no customization options, but it can help you and your team understand the code more quickly and easily. References = : Command: fmt : Using Terraform fmt Command to Format Your Terraform Code
NEW QUESTION # 23
A module can always refer to all variables declared in its parent module.
- A. True
- B. False
Answer: B
Explanation:
Explanation
A module cannot always refer to all variables declared in its parent module, as it needs to explicitly declare input variables and assign values to them from the parent module's arguments. A module cannot access the parent module's variables directly, unless they are passed as input arguments.
NEW QUESTION # 24
The public Terraform Module Registry is free to use.
- A. True
- B. False
Answer: A
Explanation:
Explanation
The public Terraform Module Registry is free to use, as it is a public service that hosts thousands of self-contained packages called modules that are used to provision infrastructure. You can browse, use, and publish modules to the registry without any cost.
NEW QUESTION # 25
Which Terraform collection type should you use to store key/value pairs?
- A. Map
- B. Set
- C. list
- D. Tuple
Answer: A
Explanation:
Explanation
The Terraform collection type that should be used to store key/value pairs is map. A map is a collection of values that are accessed by arbitrary labels, called keys. The keys and values can be of any type, but the keys must be unique within a map. For example, var = { key1 = "value1", key2 = "value2" } is a map with two key/value pairs. Maps are useful for grouping related values together, such as configuration options or metadata. References = [Collection Types], [Map Type Constraints]
NEW QUESTION # 26
The_________determines how Terraform creates, updates, or delete resources.
- A. Terraform core
- B. Terraform provisioner
- C. Terraform provider
- D. Terraform configuration
Answer: C
Explanation:
This is what determines how Terraform creates, updates, or deletes resources, as it is responsible for understanding API interactions with some service and exposing resources and data sources based on that API.
NEW QUESTION # 27
You decide to move a Terraform state file to Amazon S3 from another location. You write the code below into a file called backend.tf.
Which command will migrate your current state file to the new S3 remote backend?
- A. terraform push
- B. terraform init
- C. terraform state
- D. terraform refresh
Answer: B
Explanation:
Explanation
This command will initialize the new backend and prompt you to migrate the existing state file to the new location3. The other commands are not relevant for this task.
NEW QUESTION # 28
Which of these commands makes your code more human readable?
- A. Terraform validate
- B. Terraform output
- C. Terraform fmt
- D. Terraform show
Answer: C
Explanation:
The command that makes your code more human readable is terraform fmt. This command is used to rewrite Terraform configuration files to a canonical format and style, following the Terraform language style conventions and other minor adjustments for readability. The command is optional, opinionated, and has no customization options, but it is recommended to ensure consistency of style across different Terraform codebases. Consistency can help your team understand the code more quickly and easily, making the use of terraform fmt very important. You can run this command on your configuration files before committing them to source control or as part of your CI/CD pipeline. References = : Command: fmt : Using Terraform fmt Command to Format Your Terraform Code
NEW QUESTION # 29
What are some benefits of using Sentinel with Terraform Cloud/Terra form Cloud? Choose three correct answers.
- A. You can check out and check in cloud access keys
- B. Sentinel Policies can be written in HashiCorp Configuration Language (HCL)
- C. You can restrict specific resource configurations, such as disallowing the use of CIDR=0.0.0.0/0.
- D. You can enforce a list of approved AWS AMIs
- E. Policy-as-code can enforce security best practices
Answer: C,D,E
Explanation:
Explanation
These are some of the benefits of using Sentinel with Terraform Cloud/Terraform Enterprise, as they allow you to implement logic-based policies that can access and evaluate the Terraform plan, state, and configuration. The other options are not true, as Sentinel does not manage cloud access keys, and Sentinel policies are written in Sentinel language, not HCL.
NEW QUESTION # 30
You have provisioned some virtual machines (VMs) on Google Cloud Platform (GCP) using the gcloud command line tool. However, you are standardizing with Terraform and want to manage these VMs using Terraform instead. What are the two things you must do to achieve this? Choose two correct answers.
- A. Run the terraform Import-gcp command
- B. Use the terraform import command for the existing VMs
- C. Write Terraform configuration for the existing VMs
- D. Provision new VMs using Terraform with the same VM names
Answer: B,C
Explanation:
To import existing resources into Terraform, you need to do two things1:
Write a resource configuration block for each resource, matching the type and name used in your state file.
Run terraform import for each resource, specifying its address and ID. There is no such command as terraform Import-gcp, and provisioning new VMs with the same names will not import them into Terraform.
NEW QUESTION # 31
Which parameters does terraform import require? Choose two correct answers.
- A. Path
- B. Provider
- C. Resource ID
- D. Resource address
Answer: C,D
Explanation:
Explanation
These are the parameters that terraform import requires, as they allow Terraform to identify the existing resource that you want to import into your state file, and match it with the corresponding configuration block in your files.
NEW QUESTION # 32
When using Terraform to deploy resources into Azure, which scenarios are true regarding state files? (Choose two.)
- A. Changing resources via the Azure Cloud Console records the change in the current state file
- B. Changing resources via the Azure Cloud Console does not update current state file
- C. When you change a resource via the Azure Cloud Console, Terraform records the changes in a new state file
- D. When you change a Terraform-managed resource via the Azure Cloud Console, Terraform updates the state file to reflect the change during the next plan or apply
Answer: B,D
Explanation:
Terraform state is a representation of the infrastructure that Terraform manages. Terraform uses state to track the current status of the resources it creates and to plan future changes. However, Terraform state is not aware of any changes made to the resources outside of Terraform, such as through the Azure Cloud Console, the Azure CLI, or the Azure API. Therefore, changing resources via the Azure Cloud Console does not update the current state file, and it may cause inconsistencies or conflicts with Terraform's desired configuration. To avoid this, it is recommended to manage resources exclusively through Terraform or to use the terraform import command to bring existing resources under Terraform's control.
When you change a Terraform-managed resource via the Azure Cloud Console, Terraform does not immediately update the state file to reflect the change. However, the next time you run terraform plan or terraform apply, Terraform will compare the state file with the actual state of the resources in Azure and detect any drifts or differences. Terraform will then update the state file to match the current state of the resources and show you the proposed changes in the execution plan. Depending on the configuration and the change, Terraform may try to undo the change, modify the resource further, or recreate the resource entirely.
To avoid unexpected or destructive changes, it is recommended to review the execution plan carefully before applying it or to use the terraform refresh command to update the state file without applying any changes.
References = Purpose of Terraform State, Terraform State, Managing State, Importing Infrastructure,
[Command: plan], [Command: apply], [Command: refresh]
NEW QUESTION # 33
You have to initialize a Terraform backend before it can be configured.
- A. True
- B. False
Answer: B
Explanation:
Explanation
You can configure a backend in your Terraform code before initializing it. Initializing a backend will store the state file remotely and enable features like locking and workspaces. References = [Terraform Backends]
NEW QUESTION # 34
Which command should you run to check if all code in a Terraform configuration that references multiple modules is properly formatted without making changes?
- A. terraform fmt -check -recursive
- B. terraform fmt -write-false
- C. terraform fmt -check
- D. terraform fmt -list -recursive
Answer: A
Explanation:
This command will check if all code in a Terraform configuration that references multiple modules is properly formatted without making changes, and will return a non-zero exit code if any files need formatting. The other commands will either make changes, list the files that need formatting, or not check the modules.
NEW QUESTION # 35
What is the Terraform style convention for indenting a nesting level compared to the one above it?
- A. With three spaces.
- B. With a tab.
- C. With four spaces.
- D. With two spaces.
Answer: D
Explanation:
Terraform's Indentation Standards: Terraform's style convention uses two spaces per nesting level for readability, helping to maintain uniform code across teams.
Configuration Files: Consistent indentation is crucial for Terraform's HCL syntax, as it improves readability and avoids parsing issues.
More details are available in the Terraform configuration style guide.
NEW QUESTION # 36
You are using a networking module in your Terraform configuration with the name label my-network. In your main configuration you have the following code:
When you run terraform validate, you get the following error:
What must you do to successfully retrieve this value from your networking module?
- A. Define the attribute vnet_id as an output in the networking module
- B. Define the attribute vmet_id as a variable in the networking modeule
- C. Change the reference value to my-network,outputs,vmet_id
- D. Change the reference value module.my,network,outputs,vnet_id
Answer: A
Explanation:
Explanation
This is what you must do to successfully retrieve this value from your networking module, as it will expose the attribute as an output value that can be referenced by other modules or resources. The error message indicates that the networking module does not have an output value named vnet_id, which causes the reference to fail.
NEW QUESTION # 37
......
Terraform-Associate-003 Exam Dumps - PDF Questions and Testing Engine: https://examtorrent.actual4test.com/Terraform-Associate-003_examcollection.html