Which scenario best illustrates the use of workspace dependencies in HCP Terraform?

Two workspaces run simultaneously to reduce deployment time

A workspace is locked to prevent changes during a maintenance window

A network workspace must apply before an application workspace that depends on the network

A workspace uses variables from another workspace

In HCP Terraform, how are permissions typically assigned to users?

By using IAM roles from the cloud provider

By setting permissions in the Terraform configuration files

By adding users to teams and assigning permissions to those teams

By granting permissions directly to each individual user

What is Sentinel in the context of HCP Terraform?

A policy-as-code framework that uses a purpose-built language to enforce rules

A version control system for Terraform configurations

A tool for managing Terraform state files

A monitoring tool for cloud resources

You have a 'network' workspace that provisions a VPC, and a 'database' workspace that provisions a database inside that VPC. You want the 'database' workspace to automatically run a plan whenever the 'network' workspace successfully applies changes. What should you configure in HCP Terraform?

Add a 'terraform_remote_state' data source in the 'database' workspace referencing the 'network' workspace.

Set up a webhook in the 'network' workspace to call the 'database' workspace's API.

Use a CI/CD pipeline to manually trigger the 'database' workspace after the 'network' workspace apply.

Configure a run trigger in the 'database' workspace that points to the 'network' workspace.

Your organization mandates that all AWS S3 buckets created via Terraform must have versioning enabled and must not be publicly accessible. You are using HCP Terraform with a policy-as-code approach. Which configuration enforces this requirement at plan time?

Add a pre-plan run task that calls an external API to check the configuration.

Create a Sentinel policy that inspects the plan and fails if an S3 bucket resource lacks versioning or has a public ACL.

Configure a workspace variable to require versioning on all S3 buckets.

Use a pre-condition block in the Terraform configuration to check the bucket settings.

HashiCorp Certified:Terraform Associate

Domain 8Objective 2

8b Describe HCP Terraform Collaboration and Governance Features TERRAFORM-ASSOCIATE-004 Practice Questions (Page 3)

Part of the HCP Terraform domain, which makes up ~13% of our current practice bank. HashiCorp does not publish an official question count, but from its 60-minute exam (~25–40 total, ~3–5 in this domain), expect 1–1 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

6concepts

Questions 11–15

11foundation · easy
Which scenario best illustrates the use of workspace dependencies in HCP Terraform?
Select an answer first
12foundation · easy
In HCP Terraform, how are permissions typically assigned to users?
Select an answer first
13foundation · easy
What is Sentinel in the context of HCP Terraform?
Select an answer first
14application · medium
You have a 'network' workspace that provisions a VPC, and a 'database' workspace that provisions a database inside that VPC. You want the 'database' workspace to automatically run a plan whenever the 'network' workspace successfully applies changes. What should you configure in HCP Terraform?
Select an answer first
15application · medium
Your organization mandates that all AWS S3 buckets created via Terraform must have versioning enabled and must not be publicly accessible. You are using HCP Terraform with a policy-as-code approach. Which configuration enforces this requirement at plan time?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TERRAFORM-ASSOCIATE-004

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “TERRAFORM-ASSOCIATE-004” is a trademark of its owner, used for identification only.