A Terraform configuration works in your local environment but fails in a colleague's environment with a 'permission denied' error. You need to determine if the issue is with the provider's authentication or with the Terraform configuration itself. What is the most efficient first step?

Enable TF_LOG=DEBUG and compare the authentication-related log entries between the two environments.

Compare the .terraform.lock.hcl files between the two environments.

Enable TF_LOG=TRACE and compare the full log output between the two environments.

Run terraform validate in both environments to check for configuration errors.

You are investigating a Terraform issue where a resource is being unexpectedly replaced. The TRACE log shows that the resource is being 'destroyed' and then 'created'. The configuration file has not been changed. What is the most likely cause?

The provider is making redundant API calls.

The resource's state file has been corrupted.

A force-new attribute in the resource's configuration has changed.

Terraform is performing a plan and apply in the same run.

You are reviewing a TRACE log from a failed terraform apply. The log shows a series of API calls to the cloud provider, followed by an error message. You notice that the error message does not include the resource name, only a request ID. What is the best way to correlate the error with the specific resource?

Re-run the apply with TF_LOG=DEBUG to see if the error message includes the resource name.

Use the terraform console to query the resource by the request ID.

Search the log for the request ID to find the API call that failed, then trace back to the resource being operated on.

Inspect the state file to find the resource that was being operated on.

A Terraform practitioner is troubleshooting a configuration that fails intermittently during the apply phase. What is the primary purpose of enabling verbose logging in Terraform?

To automatically fix configuration errors without requiring manual intervention.

To increase the speed of Terraform operations by reducing the amount of output generated.

To replace the need for reading the Terraform state file when troubleshooting.

To provide detailed diagnostic information about Terraform's internal operations, which helps identify the root cause of issues.

While examining a DEBUG log, you notice that a resource is being 'created' even though you expected it to be 'updated'. The configuration file has not been changed. What is the most likely explanation?

Terraform is performing a plan and apply in the same run.

The provider has a bug that causes it to always create resources.

The resource was removed from the state file, so Terraform plans to recreate it.

The resource's configuration has a 'create_before_destroy' setting.

HashiCorp Certified:Terraform Associate

Domain 7Objective 3

7c Describe When and How to Use Verbose Logging TERRAFORM-ASSOCIATE-004 Practice Questions (Page 1)

Part of the Maintain infrastructure with Terraform domain, which makes up ~7% of our current practice bank. HashiCorp does not publish an official question count, but from its 60-minute exam (~25–40 total, ~2–3 in this domain), expect 1–1 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

6concepts

Questions 1–5

1application · medium
A Terraform configuration works in your local environment but fails in a colleague's environment with a 'permission denied' error. You need to determine if the issue is with the provider's authentication or with the Terraform configuration itself. What is the most efficient first step?
Select an answer first
2expert · hard
You are investigating a Terraform issue where a resource is being unexpectedly replaced. The TRACE log shows that the resource is being 'destroyed' and then 'created'. The configuration file has not been changed. What is the most likely cause?
Select an answer first
3expert · hard
You are reviewing a TRACE log from a failed terraform apply. The log shows a series of API calls to the cloud provider, followed by an error message. You notice that the error message does not include the resource name, only a request ID. What is the best way to correlate the error with the specific resource?
Select an answer first
4foundation · easy
A Terraform practitioner is troubleshooting a configuration that fails intermittently during the apply phase. What is the primary purpose of enabling verbose logging in Terraform?
Select an answer first
5application · medium
While examining a DEBUG log, you notice that a resource is being 'created' even though you expected it to be 'updated'. The configuration file has not been changed. What is the most likely explanation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TERRAFORM-ASSOCIATE-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “TERRAFORM-ASSOCIATE-004” is a trademark of its owner, used for identification only.