During terraform apply, an error occurs: 'Error: Error creating instance: InvalidParameterValue: The security group sg-12345 does not exist'. The configuration references this security group by ID. What is the most likely cause and the appropriate first step to resolve it?

The state file is out of sync; run terraform refresh to re-import the security group into state.

The security group is defined in the same configuration; run terraform apply -target=aws_security_group.sg first.

The apply failed due to a transient network issue; simply re-run terraform apply.

The security group was deleted outside Terraform; update the configuration to reference a valid security group ID.

What does the `-target` option do in `terraform apply`?

It targets a specific cloud provider region

It targets the state file for updates

It applies changes only to resources that are failing

It limits the apply to specific resources and their dependencies

A developer runs terraform apply after modifying a configuration. The plan shows that a security group rule will be added and an existing instance will be replaced. The developer approves the plan, and the apply completes successfully. What should the developer do to confirm that the new instance is functioning as expected before considering the change complete?

Run terraform state list to confirm the instance resource is present in the state file.

Run terraform output to view the instance's public IP and then test connectivity to the application.

Run terraform plan again and check that it reports 'No changes'.

Run terraform refresh to update the state with the latest instance attributes.

Which command would apply changes only to the resource `aws_instance.web`?

terraform apply aws_instance.web

terraform apply -only=aws_instance.web

terraform apply -resource=aws_instance.web

terraform apply -target=aws_instance.web

What is the purpose of the `-var-file` option in `terraform apply`?

To save the current variable values to a file

To validate the variable definitions in the configuration

To list all variables defined in the configuration

To specify a file containing variable values

HashiCorp Certified:Terraform Associate

Domain 3Objective 5

3e Apply Changes to Infrastructure with Terraform TERRAFORM-ASSOCIATE-004 Practice Questions (Page 5)

Part of the Core Terraform workflow domain, which makes up ~20% of our current practice bank. HashiCorp does not publish an official question count, but from its 60-minute exam (~25–40 total, ~5–8 in this domain), expect 1–1 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

10concepts

Questions 21–25

21application · medium
During terraform apply, an error occurs: 'Error: Error creating instance: InvalidParameterValue: The security group sg-12345 does not exist'. The configuration references this security group by ID. What is the most likely cause and the appropriate first step to resolve it?
Select an answer first
22foundation · easy
What does the `-target` option do in `terraform apply`?
Select an answer first
23application · medium
A developer runs terraform apply after modifying a configuration. The plan shows that a security group rule will be added and an existing instance will be replaced. The developer approves the plan, and the apply completes successfully. What should the developer do to confirm that the new instance is functioning as expected before considering the change complete?
Select an answer first
24foundation · easy
Which command would apply changes only to the resource `aws_instance.web`?
Select an answer first
25foundation · easy
What is the purpose of the `-var-file` option in `terraform apply`?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TERRAFORM-ASSOCIATE-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “TERRAFORM-ASSOCIATE-004” is a trademark of its owner, used for identification only.