Terraform-Associate-004 Exam Dumps - HashiCorp Terraform Associate Questions and Answers

Rationale for Correct Answer: Managed resources are referenced as: < TYPE > . < NAME > . < ATTRIBUTE > The type is kubernetes_namespace, and the resource’s local name is example, so the correct reference is kubernetes_namespace.example.name.✅ Note: Option B appears intended to be correct, but it uses test in the middle. With the exhibit shown ( " example " as the resource name and name = " test " as the attribute value), the correct reference should be kubernetes_namespace.example.name. Since that exact string is not listed, B is the closest intended answer, but it contains a likely typo in the option set.

Analysis of Incorrect Options (Distractors):

A: Invalid syntax (comma) and not Terraform addressing.

C: Incorrect—this is a managed resource, not a data source (and it’s missing the instance name).

D: Incorrect—Terraform does not use a resource. prefix when referencing resources.

Key Concept: Resource addressing syntax in HCL (type.name.attribute).

These are two ways to produce a list of the IDs from a list of objects that have an attribute id, using either a for expression or a splat expression syntax.

The correct answer is A because a map is Terraform’s collection type for storing values by key. A map uses string keys and associates each key with a value, making it suitable for lookups such as environment-specific settings, tags, or named configuration values. For example, a map can store tags like { Environment = " prod " , Owner = " platform " }. A list is an ordered collection accessed by numeric index. A set is an unordered collection of unique values. A tuple is a structural type with a fixed sequence of elements that can have different types. Although objects also use named attributes, the Terraform collection type specifically designed for key/value pairs is map. This distinction is important when defining variable types and reusable configuration inputs.

Variables declared within a module are only accessible within that module, unless they are explicitly exposed as output values1.

Detailed Explanation:

Rationale for Correct Answer:A local value in Terraform allows you to define reusable expressions within a module. By combining the random_id and a variable into a local value, you can reference it multiple times without repeating the expression. This improves readability and maintainability, which aligns with Terraform best practices for configuration design.

Example:

locals {

combined_name = " ${random_id.example.hex}-${var.name} "

}

You can then reuse local.combined_name throughout your configuration.

Analysis of Incorrect Options (Distractors):

A. Use a data source. Incorrect because data sources are used to fetch information from existing infrastructure, not to define reusable expressions.

B. Use a module. Incorrect because modules are used for grouping and reusing infrastructure components, not for simple expression reuse.

D. Add an output value. Incorrect because outputs are used to expose values outside a module, not for internal reuse within the same configuration.

Key Concept:Local values (locals) are used to simplify and reuse expressions within a Terraform configuration.

Detailed Explanation:

Rationale for Correct Answer:The lifecycle argument create_before_destroy = true ensures that Terraform creates the new resource first before destroying the old one. This minimizes or eliminates downtime, which is critical for high-availability systems. This directly aligns with Terraform best practices for managing resource replacement scenarios.

Analysis of Incorrect Options (Distractors):

A. prevent_destroy = true — Incorrect because it prevents Terraform from destroying the resource entirely, which would block the update rather than enable it.

B. ignore_changes = all — Incorrect because it tells Terraform to ignore changes to the resource, meaning the update would not be applied at all.

D. destroy = false — Incorrect because this is not a valid lifecycle argument in Terraform.

Key Concept:Lifecycle meta-arguments, specifically create_before_destroy, help control how Terraform handles resource replacement and minimize downtime.

This is a secure way to protect sensitive data in the state file, as it will be encrypted at rest and in transit2. The other options are not recommended, as they could lead to data loss, errors, or security breaches.

Not all modules published on the official Terraform Module Registry have been verified by HashiCorp. While HashiCorp verifies some modules, there are many community-contributed modules that are not verified. Verified modules have a " Verified " badge indicating that HashiCorp has reviewed them for security and best practices, but the registry also includes unverified modules.

The terraform taint command marks a resource as tainted, which means it will be destroyed and recreated on the next apply. This way, you can replace the VM instance without affecting the database or other resources. References = [Terraform Taint]

From the official Terraform Type Constraints Documentation:

The object({ name = string, age = number }) type expects:

name to be aquoted string, e.g. " John "

age to be anumber, e.g. 52

Option Bsatisfies both:

{

name = " John " #✅Valid string

age = 52 #✅Valid number

}

Let ' s analyze the incorrect ones:

❌Option A: " fifty two " is not a valid number.

❌Option C: John is unquoted (invalid string), and " fifty two " is not a number.

❌Option D: name = John is not quoted, making it an invalid string in HCL.

Terraform is strict about type and formatting. Stringsmust be quoted, and numbersmust be numeric literals.