{"id":24838,"date":"2026-09-30T06:32:15","date_gmt":"2026-09-30T06:32:15","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=24838"},"modified":"2026-09-30T06:32:15","modified_gmt":"2026-09-30T06:32:15","slug":"hashicorp-terraform-associate-004-practice-test-questions-and-exam-dumps-part12-q221-240","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/hashicorp-terraform-associate-004-practice-test-questions-and-exam-dumps-part12-q221-240\/","title":{"rendered":"HashiCorp Terraform Associate 004 Practice Test Questions and Exam Dumps Part12 Q221-240"},"content":{"rendered":"

View Full <\/b>HashiCorp Terraform Associate 004 Exam Dumps<\/b><\/a> and Practice Test Dumps.<\/b><\/p>\n


\n<\/b>Q221. Which Terraform function calculates a host address within a network prefix<\/b><\/p>\n

    \n
  1. <\/b> cidrsubnet<\/span><\/li>\n
  2. <\/b> cidrnetmask<\/span><\/li>\n
  3. <\/b> cidrhost<\/span><\/li>\n
  4. <\/b> cidrcontains<\/span><\/li>\n<\/ol>\n

    Correct Answer: 3. cidrhost<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    The cidrhost function calculates an individual host address within a specified network prefix using a host number. cidrsubnet calculates a subnet prefix from a larger network. cidrnetmask returns the subnet mask for an IPv4 network. cidrcontains checks whether an address or network belongs inside another network prefix. cidrhost is therefore the correct answer because it is useful when Terraform configuration must derive predictable addresses from a known network range. Users should ensure the chosen host number represents a valid address for the intended network and infrastructure platform.<\/span><\/p>\n

    Q222. Which Terraform function returns the IPv4 network mask for a CIDR prefix<\/b><\/p>\n

      \n
    1. <\/b> cidrnetmask<\/span><\/li>\n
    2. <\/b> cidrhost<\/span><\/li>\n
    3. <\/b> cidrsubnet<\/span><\/li>\n
    4. <\/b> cidrcontains<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1. cidrnetmask<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      The cidrnetmask function converts an IPv4 CIDR prefix into its corresponding network mask representation. cidrhost calculates an individual address within a network. cidrsubnet derives a subnet from a larger prefix. cidrcontains evaluates whether one network or address is contained within another. cidrnetmask is therefore the correct answer because some provider arguments or generated configuration require a traditional network mask rather than CIDR notation. Users should remember that the function is intended for IPv4 addressing and should validate network calculations before applying them to infrastructure.<\/span><\/p>\n

      Q223. Which Terraform function checks whether an IP address belongs inside a specified network prefix<\/b><\/p>\n

        \n
      1. <\/b> cidrhost<\/span><\/li>\n
      2. <\/b> cidrnetmask<\/span><\/li>\n
      3. <\/b> cidrsubnet<\/span><\/li>\n
      4. <\/b> cidrcontains<\/span><\/li>\n<\/ol>\n

        Correct Answer: 4. cidrcontains<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        The cidrcontains function checks whether a specified IP address or network prefix is contained within another CIDR network. cidrhost calculates a host address. cidrnetmask converts an IPv4 prefix into a network mask. cidrsubnet calculates a subnet prefix. cidrcontains is therefore the correct answer because validation logic may need to verify that an address or child network belongs to an approved parent range. This can help prevent invalid network inputs before Terraform attempts to configure remote infrastructure.<\/span><\/p>\n

        Q224. Which Terraform function returns the hexadecimal SHA512 hash of a string<\/b><\/p>\n

          \n
        1. <\/b> sha256<\/span><\/li>\n
        2. <\/b> sha512<\/span><\/li>\n
        3. <\/b> base64sha512<\/span><\/li>\n
        4. <\/b> filebase64sha512<\/span><\/li>\n<\/ol>\n

          Correct Answer: 2. sha512<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          The sha512 function calculates a SHA512 hash from a supplied string and returns the result using hexadecimal representation. sha256 uses the SHA256 algorithm. base64sha512 returns a SHA512 hash encoded with Base64 representation. filebase64sha512 calculates a SHA512 hash from file contents rather than directly from a string. sha512 is therefore the correct answer because Terraform includes several hashing functions for detecting changes or generating deterministic fingerprints. Hash values should not be confused with encryption because hashing does not provide confidentiality for the original input.<\/span><\/p>\n

          Q225. Which Terraform function returns a SHA512 hash encoded in Base64<\/b><\/p>\n

            \n
          1. <\/b> base64sha512<\/span><\/li>\n
          2. <\/b> sha512<\/span><\/li>\n
          3. <\/b> base64encode<\/span><\/li>\n
          4. <\/b> filebase64<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1. base64sha512<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            The base64sha512 function calculates the SHA512 hash of a string and returns the resulting hash encoded in Base64 form. sha512 returns a hexadecimal hash instead. base64encode only encodes input data and does not calculate a hash. filebase64 reads file contents and returns them in Base64 representation. base64sha512 is therefore the correct answer because some systems expect cryptographic hash output in Base64 format. As with other hash functions this is useful for fingerprints and change detection rather than protecting secret information through encryption.<\/span><\/p>\n

            Q226. Which Terraform function returns the MD5 hash of a string<\/b><\/p>\n

              \n
            1. <\/b> sha1<\/span><\/li>\n
            2. <\/b> sha256<\/span><\/li>\n
            3. <\/b> md5<\/span><\/li>\n
            4. <\/b> base64encode<\/span><\/li>\n<\/ol>\n

              Correct Answer: 3. md5<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              The md5 function calculates the MD5 hash of a supplied string and returns the result in hexadecimal form. sha1 and sha256 use different hashing algorithms. base64encode converts data into another representation without hashing it. md5 is therefore the correct answer because Terraform can calculate deterministic fingerprints when a provider or external system specifically requires this algorithm. MD5 is not considered suitable for modern security sensitive cryptographic purposes because collision weaknesses are known. It should be used only where compatibility or nonsecurity fingerprinting requirements make it appropriate.<\/span><\/p>\n

              Q227. Which Terraform function returns the SHA1 hash of a string<\/b><\/p>\n

                \n
              1. <\/b> md5<\/span><\/li>\n
              2. <\/b> sha512<\/span><\/li>\n
              3. <\/b> base64sha256<\/span><\/li>\n
              4. <\/b> sha1<\/span><\/li>\n<\/ol>\n

                Correct Answer: 4. sha1<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                The sha1 function calculates a SHA1 hash from a string and returns the result using hexadecimal representation. md5 uses the MD5 algorithm. sha512 produces a larger SHA512 hash. base64sha256 calculates SHA256 and returns Base64 encoded output. sha1 is therefore the correct answer because Terraform supports several hash functions for compatibility with provider requirements and external systems. SHA1 has known weaknesses for collision resistance and should not be selected for new security sensitive designs when stronger algorithms are available.<\/span><\/p>\n

                Q228. Which Terraform function reads a file and returns its SHA256 hash in hexadecimal form<\/b><\/p>\n

                  \n
                1. <\/b> sha256<\/span><\/li>\n
                2. <\/b> filesha256<\/span><\/li>\n
                3. <\/b> filebase64sha256<\/span><\/li>\n
                4. <\/b> filebase64<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 2. filesha256<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  The filesha256 function reads a local file and calculates its SHA256 hash in hexadecimal form. sha256 hashes a supplied string rather than reading a file directly. filebase64sha256 calculates the file hash but returns Base64 representation. filebase64 returns the file contents encoded as Base64. filesha256 is therefore the correct answer because Terraform configurations may need to detect changes to local artifacts or provide checksums required by a resource. The file must already exist when Terraform evaluates the configuration.<\/span><\/p>\n

                  Q229. Which Terraform function converts a string into URL safe percent encoded text<\/b><\/p>\n

                    \n
                  1. <\/b> base64encode<\/span><\/li>\n
                  2. <\/b> jsonencode<\/span><\/li>\n
                  3. <\/b> urlencode<\/span><\/li>\n
                  4. <\/b> tostring<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 3. urlencode<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    The urlencode function converts a string into percent encoded text suitable for use in URL query components. base64encode performs Base64 encoding. jsonencode serializes Terraform values as JSON. tostring performs a general type conversion to text. urlencode is therefore the correct answer because configuration may need to safely include spaces or special characters in a URL parameter. Users should still understand how the target service expects complete URLs to be constructed because encoding an entire URL when only one component should be encoded can produce an invalid address.<\/span><\/p>\n

                    Q230. Which Terraform function returns the current working directory where Terraform was started<\/b><\/p>\n

                      \n
                    1. <\/b> path.cwd<\/span><\/li>\n
                    2. <\/b> path.module<\/span><\/li>\n
                    3. <\/b> path.root<\/span><\/li>\n
                    4. <\/b> terraform.workspace<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 1. path.cwd<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      path.cwd returns the original working directory from which Terraform was started. path.module returns the directory containing the module where the expression appears. path.root returns the root module directory. terraform.workspace returns the currently selected CLI workspace name. path.cwd is therefore the correct answer because local automation may occasionally need to reference the starting directory. Reusable configurations should avoid depending unnecessarily on the invoking directory because local execution remote execution and automated pipelines can use different directory structures.<\/span><\/p>\n

                      Q231. Which path value returns the directory of the root Terraform module<\/b><\/p>\n

                        \n
                      1. <\/b> path.module<\/span><\/li>\n
                      2. <\/b> path.root<\/span><\/li>\n
                      3. <\/b> path.cwd<\/span><\/li>\n
                      4. <\/b> terraform.workspace<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 2. path.root<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        path.root returns the file system path of the root module in the current Terraform configuration. path.module returns the directory for the module where the expression is evaluated. path.cwd returns the directory where Terraform was originally started. terraform.workspace returns a workspace name rather than a file path. path.root is therefore the correct answer because child modules may occasionally need a reference relative to the root configuration. Module authors should still avoid unnecessary assumptions about root directory layout because reusable modules should remain as portable as possible.<\/span><\/p>\n

                        Q232. Which Terraform function returns the number of characters in a string<\/b><\/p>\n

                          \n
                        1. <\/b> substr<\/span><\/li>\n
                        2. <\/b> format<\/span><\/li>\n
                        3. <\/b> index<\/span><\/li>\n
                        4. <\/b> length<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 4. length<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          The length function returns the number of characters in a string and can also return the number of elements in supported collections. substr extracts a section of text. format creates formatted strings. index finds the position of a value inside a list. length is therefore the correct answer because validation rules may need to ensure that names identifiers or input values satisfy minimum or maximum length requirements. Users should combine length checks with any other provider restrictions such as allowed characters or required prefixes.<\/span><\/p>\n

                          Q233. Which Terraform expression can filter elements while transforming a collection<\/b><\/p>\n

                            \n
                          1. <\/b> for expression<\/span><\/li>\n
                          2. <\/b> conditional expression only<\/span><\/li>\n
                          3. <\/b> splat expression<\/span><\/li>\n
                          4. <\/b> dynamic block only<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1. for expression<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            A for expression can transform each element of a collection and can also include a filtering condition so only selected elements appear in the result. Conditional expressions choose between two values. Splat expressions provide concise access to attributes across multiple elements. Dynamic blocks generate repeated nested configuration blocks. for expression is therefore the correct answer because collection transformation and filtering can be combined in one declarative expression. This is useful for building maps or lists from larger inputs while excluding items that do not meet the required condition.<\/span><\/p>\n

                            Q234. Which Terraform function returns a list of values from a map ordered by sorted keys<\/b><\/p>\n

                              \n
                            1. <\/b> keys<\/span><\/li>\n
                            2. <\/b> merge<\/span><\/li>\n
                            3. <\/b> values<\/span><\/li>\n
                            4. <\/b> lookup<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 3. values<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              The values function returns a list containing the values from a map according to the lexical order of its keys. keys returns the keys themselves. merge combines maps or objects. lookup retrieves one map value by key. values is therefore the correct answer because Terraform may need to transform a named map into an ordered list for another expression. When key identity remains important it is usually better to preserve the original map rather than converting it to a list and losing the explicit association between each key and value.<\/span><\/p>\n

                              Q235. Which command can create a new plan that proposes destruction of all managed resources<\/b><\/p>\n

                                \n
                              1. <\/b> terraform validate<\/span><\/li>\n
                              2. <\/b> terraform plan with destroy<\/span><\/li>\n
                              3. <\/b> terraform show<\/span><\/li>\n
                              4. <\/b> terraform output<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 2. terraform plan with destroy<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                terraform plan with destroy creates a plan whose goal is to remove all resources managed by the current configuration and state. terraform validate checks configuration correctness. terraform show displays plans or state. terraform output prints output values. terraform plan with destroy is therefore the correct answer because it allows users to review destructive actions before executing them. This is safer than immediately destroying infrastructure because the proposed removals can be inspected first. Destructive plans should be handled carefully because deleting infrastructure can also remove persistent data and dependencies.<\/span><\/p>\n

                                Q236. Which Terraform feature can prevent an output from being stored persistently in state when supported for temporary values<\/b><\/p>\n

                                  \n
                                1. <\/b> sensitive value<\/span><\/li>\n
                                2. <\/b> local value<\/span><\/li>\n
                                3. <\/b> variable default<\/span><\/li>\n
                                4. <\/b> ephemeral value<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 4. ephemeral value<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  An ephemeral value is designed for temporary information that should be available during Terraform operations without being persisted in state or plan files in supported contexts. Sensitive values are hidden from normal display but can still be stored in state. Local values are normal evaluated expressions. Variable defaults provide fallback input values. ephemeral value is therefore the correct answer because short lived credentials and similar temporary data should avoid unnecessary persistence. Users must ensure that the surrounding resource or provider argument supports ephemeral values before relying on this behavior.<\/span><\/p>\n

                                  Q237. Which Terraform block can declare a temporary managed value that is not stored in state<\/b><\/p>\n

                                    \n
                                  1. <\/b> ephemeral block<\/span><\/li>\n
                                  2. <\/b> data block<\/span><\/li>\n
                                  3. <\/b> output block<\/span><\/li>\n
                                  4. <\/b> moved block<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1. ephemeral block<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    An ephemeral block declares a temporary resource value whose lifecycle exists during Terraform operations without normal persistence in state. Data blocks read external information but their resulting values participate in ordinary Terraform evaluation. Output blocks expose values from a module. Moved blocks record address changes. ephemeral block is therefore the correct answer because some providers can supply temporary credentials tokens or other short lived information that should not remain in state. Support depends on the provider and resource type, so module authors should confirm that an appropriate ephemeral resource is available.<\/span><\/p>\n

                                    Q238. Which variable argument can mark an input as temporary so its value is not persisted in state when supported<\/b><\/p>\n

                                      \n
                                    1. <\/b> sensitive<\/span><\/li>\n
                                    2. <\/b> ephemeral<\/span><\/li>\n
                                    3. <\/b> nullable<\/span><\/li>\n
                                    4. <\/b> validation<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 2. ephemeral<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      The ephemeral argument can mark a supported input variable as temporary so its value is not persisted in state or plan files where ephemeral values are supported. sensitive hides a value from normal CLI output but does not prevent state storage. nullable controls whether null can be supplied. validation defines acceptance rules for input values. ephemeral is therefore the correct answer because short lived secrets may need to flow through Terraform without becoming permanently recorded. Module authors must ensure that ephemeral values are passed only into contexts that accept ephemeral data.<\/span><\/p>\n

                                      Q239. Which Terraform variable setting controls whether null is accepted as an input value<\/b><\/p>\n

                                        \n
                                      1. <\/b> sensitive<\/span><\/li>\n
                                      2. <\/b> default<\/span><\/li>\n
                                      3. <\/b> ephemeral<\/span><\/li>\n
                                      4. <\/b> nullable<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 4. nullable<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        The nullable argument controls whether a Terraform input variable can accept null as a valid value. sensitive affects how the value is displayed. default provides a value when the caller does not assign one. ephemeral controls temporary value persistence in supported configurations. nullable is therefore the correct answer because module authors may need to distinguish between omitted values and explicitly supplied null values. Setting nullable appropriately helps define a clearer module interface and prevents callers from passing null when the module requires a concrete value.<\/span><\/p>\n

                                        Q240. Which Terraform output argument can prevent an output value from being persisted when it is intended to be temporary<\/b><\/p>\n

                                          \n
                                        1. <\/b> sensitive<\/span><\/li>\n
                                        2. <\/b> depends_on<\/span><\/li>\n
                                        3. <\/b> ephemeral<\/span><\/li>\n
                                        4. <\/b> description<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 3. ephemeral<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          The ephemeral argument can mark a supported output as temporary so the value can be passed between modules without being persisted in Terraform state or saved plan files. sensitive suppresses normal display but still allows state persistence. depends_on defines an explicit dependency. description documents the output. ephemeral is therefore the correct answer because temporary credentials or other short lived values may need to flow through module boundaries without becoming permanently recorded. Ephemeral outputs must be used only in compatible contexts that also support temporary values.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full HashiCorp Terraform Associate 004 Exam Dumps and Practice Test Dumps. Q221. Which Terraform function calculates a host address within a network prefix cidrsubnet cidrnetmask cidrhost cidrcontains Correct Answer: 3. cidrhost Explanation The cidrhost function calculates an individual host address within a specified network prefix using a host number. cidrsubnet calculates a subnet prefix […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/24838"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=24838"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/24838\/revisions"}],"predecessor-version":[{"id":24839,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/24838\/revisions\/24839"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=24838"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=24838"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=24838"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}