Your organization has two separate Terraform configurations: one for a shared VPC and one for an application. The VPC configuration uses an S3 backend with a bucket policy that allows read access to the application team's IAM role. The application configuration uses a terraform_remote_state data source to read the VPC ID. However, the application team reports that the data source is returning an error that the state file is not found. What is the most likely cause?

The key in the terraform_remote_state data source does not match the actual state file key in the S3 bucket

The IAM role for the application team does not have permission to read the state file

The S3 bucket is in a different region than the one specified in the backend configuration

The VPC configuration has not been applied yet

Which Terraform mechanism is specifically designed to read outputs from another separate configuration's state file?

The terraform_remote_state data source

The data "template_file" data source

Your networking team manages a shared VNet configuration in a separate Terraform repository. The application team's configuration needs the VNet ID and subnet IDs to deploy VMs. Both teams use the same AWS account and an S3 backend with DynamoDB locking. The networking configuration already exposes the required values as outputs. What should the application team add to their configuration to consume these values?

A terraform_remote_state data source pointing to the networking team's state file, reading the output values

A data source for each resource type (aws_vpc, aws_subnet) that queries the AWS API directly

An output block in the application configuration that copies the values from the networking configuration's CLI output

A terraform_workspace data source that reads the networking team's workspace outputs

When using an S3 backend for remote state, what is the recommended way to restrict access to the state file for a specific configuration?

Make the S3 bucket public and rely on the state file's obscurity

Use an IAM policy that allows access only to the specific S3 object key

Use a shared access key for all configurations

Store the state file in a separate bucket for each configuration

HashiCorp Certified:Terraform Authoring and Operations Professional

Domain 3Objective 4

3d TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL Practice Questions (Page 1)

Part of the Develop collaborative Terraform workflows domain, which makes up ~16% of our current practice bank. HashiCorp does not publish an official question count, but from its 240-minute exam (~95–160 total, ~15–26 in this domain), expect 4–7 from this objective — we provide 18 practice questions to prepare you well beyond it. (estimate)

18questions here

4free pages

4concepts

Questions 1–5

1expert · hard
Your organization has two separate Terraform configurations: one for a shared VPC and one for an application. The VPC configuration uses an S3 backend with a bucket policy that allows read access to the application team's IAM role. The application configuration uses a terraform_remote_state data source to read the VPC ID. However, the application team reports that the data source is returning an error that the state file is not found. What is the most likely cause?
Select an answer first
2application · medium
You have a single Terraform configuration with multiple workspaces (dev, staging, prod) using an S3 backend. The staging workspace needs the database endpoint from the prod workspace to configure a read replica. The prod workspace has the database endpoint as an output. What is the correct key to use in a terraform_remote_state data source to read the prod workspace's state?
Select an answer first
3foundation · easy
Which Terraform mechanism is specifically designed to read outputs from another separate configuration's state file?
Select an answer first
4application · medium
Your networking team manages a shared VNet configuration in a separate Terraform repository. The application team's configuration needs the VNet ID and subnet IDs to deploy VMs. Both teams use the same AWS account and an S3 backend with DynamoDB locking. The networking configuration already exposes the required values as outputs. What should the application team add to their configuration to consume these values?
Select an answer first
5foundation · easy
When using an S3 backend for remote state, what is the recommended way to restrict access to the state file for a specific configuration?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by HashiCorp. “TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL” is a trademark of its owner, used for identification only.

3d TERRAFORM-AUTHORING-AND-OPERATIONS-PROFESSIONAL Practice Questions (Page 1)

Questions 1–5

Which Terraform mechanism is specifically designed to read outputs from another separate configuration's state file?

When using an S3 backend for remote state, what is the recommended way to restrict access to the state file for a specific configuration?

Keep studying — Develop collaborative Terraform workflows