Free HashiCorp Terraform-Associate-004 Exam Questions

Become HashiCorp Certified with updated Terraform-Associate-004 exam questions and correct answers

Page: 1 / 69

Total 342 Questions | Updated On: Jan 29, 2026

Add To Cart

Question 1

Your configuration uses a module stored on a private registry that is configured with this version argument: version = "~> 3.2.0". The registry has versions 3.2.0, 3.2.5, 3.3.0, and 4.0.0 available for this module. Which version will Terraform download during terraform init?

A : 4.0.0

B : 3.2.5

C : 3.3.0

D : 3.2.0

Answer: B

Question 2

Which statements about sensitive data and Terraform state are correct? (select two)

A : Marking a variable sensitive = true does not prevent it from being written to state.

B : Using local state automatically encrypts secrets on disk without extra steps.

C : Sensitive outputs are never stored in state, only displayed at apply time.

D : The state file can contain sensitive values in plaintext by default.

Answer: A,D

Question 3

Your organization is using HCP Terraform with separate workspaces for networking and application infrastructure. You want the app-tier workspace to automatically start a new run whenever networking-vpc finishes a successful apply so downstream changes stay in sync.Which HCP Terraform feature should you configure?

A : remote state data sources

B : variable sets shared across both projects

C : use run tasks in the apply phase

D : run triggers between the two workspaces

Answer: D

Question 4

What is the .terraform.lock.hcl file and when does Terraform create or modify it?

A : The .terraform.lock.hcl file is a state snapshot used by Terraform. It is created or updated every time you run terraform apply.

B : The .terraform.lock.hcl file is a concurrency lock to prevent simultaneous runs. It is created or updated every time you run a terraform plan.

C : The .terraform.lock.hcl file is a dependency lock file used by Terraform. It is created or updated every time you run terraform init.

D : The .terraform.lock.hcl file contains backend connection and credentials settings. It is created or updated every time you modify the backend.

Answer: C

Question 5

In the snippet below, where does the value for vpc_security_group_ids come from?module "ec2_instances" { source = "terraform-aws-modules/ec2-instance/aws" version = "4.3.0" name = "pr0d-east-app" instance_count = 2 ami = "ami-0c5204531f799e5-2" instance_type = "t3.micro" vpc_security_group_ids = [module.vpc.default_security_group_id] subnet_id = module.vpc.public_subnets[0] tags = { Owner = "btk-platform", Env = "pr0d-east" }}

A : an environment variable being used during a terraform apply

B : from a variable likely declared in a .tfvars file being passed to the module

C : the Terraform public registry

D : the output of another module

Answer: D

Page: 1 / 69

Total 342 Questions | Updated On: Jan 29, 2026

Add To Cart