A team is migrating from an S3 backend to an AzureRM backend. They have updated the backend block and run `terraform init -migrate-state`. The migration succeeds, but they notice that the local state file still exists. What should they do?

Run `terraform init` again to ensure the local file is removed.

Keep the local file as a backup; it will not interfere with future operations.

Run `terraform state push` to overwrite the remote state with the local file.

Delete the local state file immediately to avoid confusion.

A team uses the S3 backend. They have configured the backend block with `bucket`, `key`, and `region`. They have also set the `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` environment variables. However, `terraform init` fails with an authentication error. What is the most likely cause?

The environment variables are not being read because the backend block does not include `access_key` and `secret_key`.

The IAM user does not have permission to access the S3 bucket.

The `region` in the backend block does not match the region of the bucket.

What must you do after modifying the backend block to change remote state storage?

Run terraform refresh to update the backend.

Run terraform init to reconfigure the backend and migrate state.

Run terraform plan to apply the backend change.

Run terraform state rm to remove the old state.

A team uses the GCS backend. They have set the `GOOGLE_APPLICATION_CREDENTIALS` environment variable to point to a service account key file. However, `terraform init` fails with a permissions error. What is the most likely cause?

The service account key file is in JSON format instead of P12.

The service account does not have the `storage.objectAdmin` role on the bucket.

The bucket is in a different project than the service account.

The environment variable is not being read because the backend block does not include `credentials`.

HashiCorp Certified:Terraform Associate

Domain 6Objective 3

6c Configure Remote State Using the Backend Block TERRAFORM-ASSOCIATE-004 Practice Questions (Page 2)

Part of the Terraform state management domain, which makes up ~10% of our current practice bank. HashiCorp does not publish an official question count, but from its 60-minute exam (~25–40 total, ~3–4 in this domain), expect 1–1 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

8concepts

Questions 6–10

6application · medium
A team uses the GCS backend for Terraform state. They want to authenticate using a service account key file. Which environment variable should they set before running `terraform init`?
Select an answer first
7expert · medium
A team is migrating from an S3 backend to an AzureRM backend. They have updated the backend block and run `terraform init -migrate-state`. The migration succeeds, but they notice that the local state file still exists. What should they do?
Select an answer first
8expert · medium
A team uses the S3 backend. They have configured the backend block with `bucket`, `key`, and `region`. They have also set the `AWS_ACCESS_KEY_ID` and `AWS_SECRET_ACCESS_KEY` environment variables. However, `terraform init` fails with an authentication error. What is the most likely cause?
Select an answer first
9foundation · easy
What must you do after modifying the backend block to change remote state storage?
Select an answer first
10expert · medium
A team uses the GCS backend. They have set the `GOOGLE_APPLICATION_CREDENTIALS` environment variable to point to a service account key file. However, `terraform init` fails with a permissions error. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TERRAFORM-ASSOCIATE-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “TERRAFORM-ASSOCIATE-004” is a trademark of its owner, used for identification only.