Free Terraform Associate 004 Exam Braindumps
Terraform Associate 004 Questions 46–50 (page: 11)

Updated On: 10-Feb-2026

It is best practice to store secret data in the same version control repository as your Terraform configuration.

  1. True
  2. False

Answer(s): B

Explanation:

It is not a best practice to store secret data in the same version control repository as your Terraform configuration, as it could expose your sensitive information to unauthorized parties or compromise your security. You should use environment variables, vaults, or other mechanisms to store and provide secret data to Terraform.



_______backends support state locking.

  1. All
  2. No
  3. Some
  4. Only local

Answer(s): C

Explanation:

Some backends support state locking, which prevents other users from modifying the state file while a Terraform operation is in progress. This prevents conflicts and data loss. Not all backends support this feature, and you can check the documentation for each backend type to see if it does.



You want to define a single input variable to capture configuration values for a server. The values must represent memory as a number, and the server name as a string.

Which variable type could you use for this input?

  1. List
  2. Object
  3. Map
  4. Terraform does not support complex input variables of different types

Answer(s): B

Explanation:

This is the variable type that you could use for this input, as it can store multiple attributes of different types within a single value. The other options are either invalid or incorrect for this use case.



Which of the following statements about Terraform modules is not true?

  1. Modules can call other modules
  2. A module is a container for one or more resources
  3. Modules must be publicly accessible
  4. You can call the same module multiple times

Answer(s): C

Explanation:

This is not true, as modules can be either public or private, depending on your needs and preferences. You can use the Terraform Registry to publish and consume public modules, or use Terraform Cloud or Terraform Enterprise to host and manage private modules.



When you use a remote backend that needs authentication, HashiCorp recommends that you:

  1. Write the authentication credentials in the Terraform configuration files
  2. Keep the Terraform configuration files in a secret store
  3. Push your Terraform configuration to an encrypted git repository
  4. Use partial configuration to load the authentication credentials outside of the Terraform code

Answer(s): D

Explanation:

This is the recommended way to use a remote backend that needs authentication, as it allows you to provide the credentials via environment variables, command-line arguments, or interactive prompts, without storing them in the Terraform configuration files.



Viewing page 11 of 53
Viewing questions 51 - 55 out of 147 questions


Post your Comments and Discuss HashiCorp Terraform Associate 004 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!