A provider requires a unique identifier for a resource that is generated by the cloud provider after creation. Where does Terraform store this identifier so it can manage the resource in future operations?

In the configuration file as a variable.

In the provider block as a default value.

In the state file as an attribute of the resource.

In the `terraform.tfvars` file.

What is a key difference between local and remote state backends?

Remote backends store state in a database, while local backends store it in a file

Local backends store state on the local filesystem, while remote backends store it in a shared location

Remote backends are only for production, while local backends are only for development

Local backends support state locking, while remote backends do not

What does the `terraform import` command do?

It brings an existing real-world resource into Terraform state

It copies configuration from one workspace to another

It deletes a resource from the cloud

It creates a new resource in the cloud

An engineer notices that a security group rule was manually added in the AWS console. When they run `terraform plan`, Terraform proposes to remove the rule. What is the most likely reason for this?

The security group rule was not defined in the configuration.

The `terraform refresh` command was not run before planning.

Terraform detects the manual change as drift and plans to revert the configuration to match state.

The state file is corrupted and needs to be recreated.

What is a recommended practice for handling sensitive data in state?

Store the state file in a public repository

Remove sensitive data from state manually

Use a remote backend that supports encryption at rest

Use local state only to avoid cloud exposure

HashiCorp Certified:Terraform Associate

Domain 2Objective 4

2d Explain How Terraform Uses and Manages State TERRAFORM-ASSOCIATE-004 Practice Questions (Page 7)

Part of the Terraform fundamentals domain, which makes up ~12% of our current practice bank. HashiCorp does not publish an official question count, but from its 60-minute exam (~25–40 total, ~3–5 in this domain), expect 1–1 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

15concepts

Questions 31–35

31application · medium
A provider requires a unique identifier for a resource that is generated by the cloud provider after creation. Where does Terraform store this identifier so it can manage the resource in future operations?
Select an answer first
32foundation · easy
What is a key difference between local and remote state backends?
Select an answer first
33foundation · easy
What does the `terraform import` command do?
Select an answer first
34application · medium
An engineer notices that a security group rule was manually added in the AWS console. When they run `terraform plan`, Terraform proposes to remove the rule. What is the most likely reason for this?
Select an answer first
35foundation · easy
What is a recommended practice for handling sensitive data in state?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TERRAFORM-ASSOCIATE-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “TERRAFORM-ASSOCIATE-004” is a trademark of its owner, used for identification only.