What does `terraform plan -destroy` generate?

A plan to destroy all resources managed by the configuration

A plan to remove the state file

A plan to recreate all resources

A plan to update all resources to their default state

A team uses a module that creates a VPC, subnets, and EC2 instances. They need to update only the subnet CIDR blocks. They run terraform plan -target=module.vpc.aws_subnet.private. What is a potential risk of this targeted plan?

The plan will fail because you cannot target resources inside a module.

The plan may not include changes to resources that depend on the subnets, such as the EC2 instances.

The plan will destroy the entire VPC module.

The plan will include all resources in the module because of implicit dependencies.

A team generates a plan with terraform plan -out=deploy.plan -refresh=false. After review, they run terraform apply deploy.plan. During the apply, Terraform detects that a resource in the state has been manually deleted in the cloud. What will happen?

The apply will succeed and leave the deleted resource out of the state.

The apply will fail because the saved plan was created with -refresh=false and the state is now inconsistent.

The apply will refresh the state automatically and adjust the plan accordingly.

The apply will succeed and recreate the deleted resource because the plan includes the create action.

A team is decommissioning a temporary environment and wants to review exactly which resources will be removed before executing the destruction. They run terraform plan -destroy. What will the plan output show?

A minus sign (-) before each resource address, indicating deletion.

A plus sign (+) before each resource address, indicating creation.

A star (*) before each resource address, indicating removal.

A tilde (~) before each resource address, indicating in-place update.

HashiCorp Certified:Terraform Authoring and Operations Professional

Domain 1Objective 2

1b TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL Practice Questions (Page 1)

Part of the Manage resource lifecycle domain, which makes up ~18% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~17–29 in this domain), expect 3–6 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

8concepts

Questions 1–5

1foundation · easy
In the output of `terraform plan -destroy`, what action symbol would you expect to see for each resource?
Select an answer first
2foundation · easy
What does `terraform plan -destroy` generate?
Select an answer first
3application · medium
A team uses a module that creates a VPC, subnets, and EC2 instances. They need to update only the subnet CIDR blocks. They run terraform plan -target=module.vpc.aws_subnet.private. What is a potential risk of this targeted plan?
Select an answer first
4expert · hard
A team generates a plan with terraform plan -out=deploy.plan -refresh=false. After review, they run terraform apply deploy.plan. During the apply, Terraform detects that a resource in the state has been manually deleted in the cloud. What will happen?
Select an answer first
5application · easy
A team is decommissioning a temporary environment and wants to review exactly which resources will be removed before executing the destruction. They run terraform plan -destroy. What will the plan output show?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.