HashiCorp Terraform-Associate-004 Practice Exam Questions & Answers

Theterraform applycommand changes both the cloud infrastructure and the state file after you approve the execution plan. The command creates, updates, or destroys the infrastructure resources to match theconfiguration. It also updates the state file to reflect the new state of the infrastructure. The.terraformdirectory, the execution plan, and the Terraform code are not changed by theterraform applycommand.Reference=Command: applyandPurpose of Terraform State

To see all the resources that Terraform will delete, you can use either of these two commands:

terraform destroywill show the plan of destruction and ask for your confirmation before proceeding. You can cancel the command if you do not want to destroy the resources.

terraform plan -destroywill show the plan of destruction without asking for confirmation. You can use this command to review the changes before runningterraform destroy.Reference= : Destroy Infrastructure : Plan Command: Options

The module source path that does not specify a remote module issource = 'module/consul'. This specifies a local module, which is a module that is stored in a subdirectory of the current working directory. The other options are all examples of remote modules, which are modules that are stored outside of the current working directory and can be accessed by various protocols, such as Git, HTTP, or the Terraform Registry. Remote modules are useful for sharing and reusing code across different configurations and environments.Reference= [Module Sources], [Local Paths], [Terraform Registry], [Generic Git Repository], [GitHub]

Terraform variable names are not saved in the state file, only their values are. The state file only stores the attributes of the resources and data sources that are managed by Terraform, not the variables that are used to configure them.

This is how the Terraform Cloud integration differs from other state backends such as S3, Consul, etc., as it allows you to perform remote operations on Terraform Cloud's servers instead of your local machine. The other options are either incorrect or irrelevant.

Rationale for Correct Answer: terraform plan -refresh-only refreshes (reconciles) the state with

the real infrastructure only for the purpose of the plan output. It does not persist (write) those updates to the state file. To actually update the stored state, you must run terraform apply -refresh-only (or a normal terraform apply). This matches the Terraform CLI objective: plan previews changes; apply makes changes (including writing state).

Analysis of Incorrect Options (Distractors):

A (True): Incorrect because terraform plan does not write state; it only calculates and displays what would change.

Key Concept: The plan vs apply workflow and when Terraform writes state.

Detailed

Rationale for Correct Answe r:terraform validate checks whether the configuration is syntactically valid and internally consistent (for example: references resolve correctly, required arguments exist, blocks are in the correct structure). If your configuration references an input variable like var.instance_type but you did not declare it with a variable 'instance_type' { ... } block, validation fails with an error such as ''Reference to undeclared input variable.'' This is exactly the kind of static configuration issue terraform validate is designed to catch.

Analysis of Incorrect Options (Distractors):

A: Incorrect. State drift (state not matching real infrastructure) is not detected by terraform validate. Drift is typically revealed by terraform plan/terraform refresh (or plan in general), because that requires reading state and querying providers.

B: Incorrect. Terraform's configuration language (HCL) allows tabs; indentation style is not a validation error (formatting is handled by terraform fmt, not validate).

D: Incorrect because C can definitely produce a validation error when a variable is referenced but not declared.

Key Concept:What terraform validate does: static validation of configuration syntax and internal consistency, not runtime/provider/state drift checks.