HashiCorp Terraform Associate Practice Test

Terraform Associate practice test: what's covered

• Infrastructure as Code (003)

Free Terraform Associate sample questions

1. Your team currently clicks through the AWS console to build environments, and dev, staging, and prod have silently drifted apart. Adopting Infrastructure as Code is expected to MOST directly address which problem?

   • A. It guarantees that cloud bills are always lower than manual provisioning regardless of resource usage
   • B. It makes infrastructure definitions versioned, peer-reviewed, and repeatable so environments stay consistent
   • C. It removes the need for any cloud provider credentials because Terraform deploys without authentication
   • D. It automatically writes the application source code that runs on top of the provisioned servers
   Show answer

   Correct: B. IaC treats infrastructure as software: definitions live in version control, get peer reviewed, and apply identically across environments, which eliminates the manual-drift problem. The cost claim is wrong because IaC does not guarantee cheaper bills; the credentials option is incorrect since providers still require authentication; and IaC provisions infrastructure, not the application code itself.

2. During an architecture review a colleague claims Terraform is imperative like a shell script. Comparing declarative and imperative approaches, how should you correct them?

   • A. Terraform is imperative because you must list every API call in the exact execution order
   • B. Both approaches are identical once compiled, so the distinction has no practical impact on Terraform
   • C. Terraform is declarative: you describe the desired end state and the engine computes the steps to reach it
   • D. Declarative tools cannot manage cloud resources and are limited to on-premises virtual machines only
   Show answer

   Correct: C. Terraform is declarative, so you specify the target state in HCL and Terraform calculates the create, update, or destroy actions needed. Calling it imperative is incorrect because you never script ordered API calls; the claim that both are identical is wrong since the execution model differs fundamentally; and declarative tools absolutely manage cloud resources.

3. A junior engineer worries that re-running terraform apply on an unchanged configuration will create duplicate infrastructure. How does idempotency in Terraform actually behave here?

   • A. Each apply appends a brand new copy of every resource regardless of the current state
   • B. Apply may only ever be executed a single time before the configuration must be deleted
   • C. Re-applying an unchanged configuration converges to the same state and makes no unintended changes
   • D. Terraform refuses to run apply twice and returns an error on the second invocation
   Show answer

   Correct: C. Idempotency means repeated applies of the same configuration converge on the identical desired state and produce no changes when nothing has drifted. The duplication option is incorrect because Terraform reconciles against state instead of appending; the single-run and error claims are wrong because apply is designed to be run safely as many times as needed.

4. Your platform team uses Terraform to stand up fleets of immutable VMs and Ansible to configure software inside long-lived servers. Which statements about how these tools differ are accurate? (Choose TWO)

   • A. Terraform focuses on provisioning infrastructure declaratively and favours an immutable approach
   • B. Ansible is primarily a configuration-management tool often used to set up software on existing hosts
   • C. Terraform and Ansible are interchangeable and neither one can be combined with the other safely
   • D. Ansible is the only tool capable of creating cloud networks, load balancers, and managed databases
   • E. Terraform must always destroy every server before any Ansible playbook is allowed to execute
   Show answer

   Correct: A and B. Terraform provisions infrastructure declaratively and leans toward immutable patterns, whereas Ansible is a configuration manager that tunes software on running hosts; the two are commonly combined. The interchangeable claim is wrong because they solve different problems together; Ansible is not the sole tool for cloud networks; and Terraform does not need to destroy servers before Ansible runs.

5. An organization running workloads across AWS, Azure, and Kubernetes wants a single IaC tool with one workflow. Comparing Terraform with CloudFormation, ARM/Bicep, and Pulumi, why does Terraform fit best?

   • A. Terraform only supports AWS, matching CloudFormation feature for feature in every region
   • B. Terraform is cloud-agnostic and uses HCL to manage many providers through one consistent workflow
   • C. Terraform requires writing Python or TypeScript exactly like Pulumi to define any resource
   • D. Terraform is restricted to Azure resources and mirrors what ARM and Bicep templates provide
   Show answer

   Correct: B. Terraform's multi-cloud strength comes from HCL plus a large provider ecosystem, giving one workflow across AWS, Azure, GCP, and Kubernetes. The AWS-only and Azure-only options are wrong because those describe CloudFormation and ARM respectively; the Python/TypeScript option is incorrect because that is Pulumi's model, not Terraform's HCL approach.

Last updated: 2026-10-19

Terraform Associate practice test FAQ