An engineer wants to look up the ID of an existing VPC to use in a new configuration. The VPC was created outside of Terraform. Which approach should they use?

Use a data source to query the VPC ID at plan time.

Run `terraform state show` to display the VPC ID.

Run `terraform import` to bring the VPC into state.

Use `terraform state pull` to get the VPC ID from the state file.

A team stores Terraform state in an S3 bucket. The state contains database passwords and API keys in plaintext. The security team requires that sensitive data be protected at rest. What should the team configure?

Enable S3 server-side encryption and restrict bucket access with IAM policies.

Use `terraform output` to print the sensitive values instead of storing them.

Store the state file in a Git repository instead of S3.

Use `terraform state rm` to remove sensitive attributes from state.

After running `terraform import`, what is required to fully manage the imported resource?

Running `terraform refresh` to update the state

Deleting the resource and recreating it

Writing the corresponding resource configuration in the .tf files

A platform team uses an S3 backend with DynamoDB for state locking. An engineer reports that `terraform plan` fails with an error saying the state lock cannot be acquired. The engineer confirms no other team member is currently running Terraform. What should the engineer do first?

Run `terraform force-unlock ` after verifying no other operation is in progress.

Delete the DynamoDB table and recreate it.

Run `terraform state rm` on the resource being modified.

Wait for the lock to expire automatically.

What type of information is typically stored in a Terraform state file?

The resolved attribute values of managed resources and their dependencies

The command history of all terraform apply runs

The full configuration code for every resource

The provider credentials and API keys

HashiCorp Certified:Terraform Associate

Domain 2Objective 4

2d Explain How Terraform Uses and Manages State TERRAFORM-ASSOCIATE-004 Practice Questions (Page 8)

Part of the Terraform fundamentals domain, which makes up ~12% of our current practice bank. HashiCorp does not publish an official question count, but from its 60-minute exam (~25–40 total, ~3–5 in this domain), expect 1–1 from this objective — we provide 43 practice questions to prepare you well beyond it. (estimate)

43questions here

9free pages

15concepts

Questions 36–40

36application · medium
An engineer wants to look up the ID of an existing VPC to use in a new configuration. The VPC was created outside of Terraform. Which approach should they use?
Select an answer first
37application · medium
A team stores Terraform state in an S3 bucket. The state contains database passwords and API keys in plaintext. The security team requires that sensitive data be protected at rest. What should the team configure?
Select an answer first
38foundation · easy
After running `terraform import`, what is required to fully manage the imported resource?
Select an answer first
39application · medium
A platform team uses an S3 backend with DynamoDB for state locking. An engineer reports that `terraform plan` fails with an error saying the state lock cannot be acquired. The engineer confirms no other team member is currently running Terraform. What should the engineer do first?
Select an answer first
40foundation · easy
What type of information is typically stored in a Terraform state file?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TERRAFORM-ASSOCIATE-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “TERRAFORM-ASSOCIATE-004” is a trademark of its owner, used for identification only.