{"id":24848,"date":"2026-09-30T06:34:37","date_gmt":"2026-09-30T06:34:37","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=24848"},"modified":"2026-09-30T06:34:37","modified_gmt":"2026-09-30T06:34:37","slug":"hashicorp-terraform-associate-004-practice-test-questions-and-exam-dumps-part17-q321-340","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/hashicorp-terraform-associate-004-practice-test-questions-and-exam-dumps-part17-q321-340\/","title":{"rendered":"HashiCorp Terraform Associate 004 Practice Test Questions and Exam Dumps Part17 Q321-340"},"content":{"rendered":"

View Full <\/b>HashiCorp Terraform Associate 004 Exam Dumps<\/b><\/a> and Practice Test Dumps.<\/b><\/p>\n


\n<\/b>Q321. Which Terraform command removes an unused CLI workspace<\/b><\/p>\n

    \n
  1. <\/b> terraform workspace clear<\/span><\/li>\n
  2. <\/b> terraform workspace remove<\/span><\/li>\n
  3. <\/b> terraform state rm<\/span><\/li>\n
  4. <\/b> terraform workspace delete<\/span><\/li>\n<\/ol>\n

    Correct Answer: 4. terraform workspace delete<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    terraform workspace delete removes an existing Terraform CLI workspace when it is no longer required. terraform workspace clear and terraform workspace remove are not the standard commands for deleting a workspace. terraform state rm removes individual managed objects from state rather than deleting an entire workspace. terraform workspace delete is therefore the correct answer because CLI workspaces represent separate state instances associated with the same configuration. Users should verify that the workspace is no longer needed and understand what infrastructure its state represents before deleting it. Terraform also prevents deletion of the currently selected workspace.<\/span><\/p>\n

    Q322. Which Terraform function matches a regular expression against a string<\/b><\/p>\n

      \n
    1. <\/b> regex<\/span><\/li>\n
    2. <\/b> replace<\/span><\/li>\n
    3. <\/b> strcontains<\/span><\/li>\n
    4. <\/b> substr<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1. regex<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      The regex function applies a regular expression pattern to a string and returns information from the matching text. replace performs text substitution. strcontains checks for a literal substring. substr extracts text based on position and length. regex is therefore the correct answer because Terraform validation or transformation logic may need pattern based matching that is more flexible than simple prefix or substring checks. Users should keep regular expressions readable and use simpler string functions when those can express the same requirement more clearly. A failed regex match can produce an error, so can may sometimes be useful in validation expressions.<\/span><\/p>\n

      Q323. Which Terraform command can validate configuration and return machine readable JSON output<\/b><\/p>\n

        \n
      1. <\/b> terraform show with json<\/span><\/li>\n
      2. <\/b> terraform output with json<\/span><\/li>\n
      3. <\/b> terraform validate with json<\/span><\/li>\n
      4. <\/b> terraform graph<\/span><\/li>\n<\/ol>\n

        Correct Answer: 3. terraform validate with json<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        terraform validate with json produces validation results in a structured machine readable format suitable for automation or editor integrations. terraform show with json converts state or plan information into JSON. terraform output with json prints output values in JSON form. terraform graph generates dependency graph information. terraform validate with json is therefore the correct answer because continuous integration systems may need to parse validation results without relying on human oriented terminal text. Validation checks syntax and internal consistency but does not guarantee that every remote provider operation will succeed when Terraform later contacts real infrastructure.<\/span><\/p>\n

        Q324. Which Terraform command option displays formatting differences without rewriting files<\/b><\/p>\n

          \n
        1. <\/b> recursive<\/span><\/li>\n
        2. <\/b> diff<\/span><\/li>\n
        3. <\/b> check<\/span><\/li>\n
        4. <\/b> no color<\/span><\/li>\n<\/ol>\n

          Correct Answer: 2. diff<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          The diff option for terraform fmt displays the differences between the current file formatting and Terraform standard formatting. recursive processes configuration in subdirectories. check verifies whether files are already formatted correctly. no color disables terminal color output. diff is therefore the correct answer because users may want to inspect exactly what formatting changes Terraform would make before allowing files to be rewritten. It is especially useful in review or automation workflows where formatting differences should be visible. Formatting affects presentation only and does not change the intended infrastructure semantics of correctly written Terraform configuration.<\/span><\/p>\n

          Q325. Which Terraform function returns a map containing key and value pairs from two separate lists<\/b><\/p>\n

            \n
          1. <\/b> zipmap<\/span><\/li>\n
          2. <\/b> merge<\/span><\/li>\n
          3. <\/b> values<\/span><\/li>\n
          4. <\/b> transpose<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1. zipmap<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            The zipmap function creates a map by pairing each key from one list with the value at the same position in another list. merge combines existing maps or objects. values extracts values from a map. transpose reorganizes a map of lists. zipmap is therefore the correct answer because Terraform expressions sometimes receive related keys and values in separate collections that need to become one map. The two lists should contain corresponding elements in matching positions. Maps created this way can then be used with lookup functions for expressions or for_each when stable keys should identify infrastructure instances.<\/span><\/p>\n

            Q326. Which Terraform command can copy provider packages into a local mirror directory<\/b><\/p>\n

              \n
            1. <\/b> terraform providers lock<\/span><\/li>\n
            2. <\/b> terraform init<\/span><\/li>\n
            3. <\/b> terraform get<\/span><\/li>\n
            4. <\/b> terraform providers mirror<\/span><\/li>\n<\/ol>\n

              Correct Answer: 4. terraform providers mirror<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              terraform providers mirror downloads provider packages required by the configuration into a directory structured for use as a provider mirror. terraform providers lock manages dependency lock information and checksums. terraform init installs dependencies for the working directory. terraform get focuses on child modules. terraform providers mirror is therefore the correct answer because organizations may need an internal or offline source of approved provider packages. The resulting mirror can support environments with restricted network access. Administrators should maintain provider versions and integrity information carefully so Terraform installs trusted packages consistently across execution environments.<\/span><\/p>\n

              Q327. Which Terraform configuration concept allows a provider to be referenced under a different local name<\/b><\/p>\n

                \n
              1. <\/b> Backend alias<\/span><\/li>\n
              2. <\/b> Local provider name<\/span><\/li>\n
              3. <\/b> Workspace alias<\/span><\/li>\n
              4. <\/b> Output alias<\/span><\/li>\n<\/ol>\n

                Correct Answer: 2. Local provider name<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                A local provider name is the name a Terraform module uses when referring to a provider inside its configuration. It is associated with the provider source address through required_providers. Backend aliases and workspace aliases are not the mechanism used for provider naming. Output aliases do not define providers. Local provider name is therefore the correct answer because the name used within a module does not have to describe the full registry source address. This separation allows modules to refer to providers consistently while Terraform still knows the exact source from which the provider package should be installed.<\/span><\/p>\n

                Q328. Which Terraform command displays detailed provider dependency relationships across modules<\/b><\/p>\n

                  \n
                1. <\/b> terraform graph<\/span><\/li>\n
                2. <\/b> terraform show<\/span><\/li>\n
                3. <\/b> terraform providers<\/span><\/li>\n
                4. <\/b> terraform state list<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 3. terraform providers<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  terraform providers displays the provider requirements detected in the current configuration and shows how modules depend on those providers. terraform graph focuses on the broader dependency graph. terraform show displays state or plan details. terraform state list lists resource addresses recorded in state. terraform providers is therefore the correct answer because provider dependency information can be useful when troubleshooting aliases inheritance or module requirements. It can also help identify which module introduces a particular provider dependency before upgrading or reorganizing provider configuration in a larger Terraform codebase.<\/span><\/p>\n

                  Q329. Which Terraform function can calculate several consecutive subnet prefixes from one parent CIDR block<\/b><\/p>\n

                    \n
                  1. <\/b> cidrsubnets<\/span><\/li>\n
                  2. <\/b> cidrhost<\/span><\/li>\n
                  3. <\/b> cidrnetmask<\/span><\/li>\n
                  4. <\/b> cidrcontains<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 1. cidrsubnets<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    The cidrsubnets function calculates multiple sequential subnet prefixes from one parent CIDR network based on additional prefix lengths. cidrhost calculates an individual address. cidrnetmask returns an IPv4 network mask. cidrcontains tests whether one address or prefix belongs within another. cidrsubnets is therefore the correct answer because infrastructure modules may need to divide a larger network into several nonoverlapping subnets in one expression. Users should plan prefix sizes carefully because changing earlier subnet arguments later can shift subsequent calculated ranges and create disruptive network changes.<\/span><\/p>\n

                    Q330. Which Terraform test command behavior is intended to verify module assertions automatically<\/b><\/p>\n

                      \n
                    1. <\/b> State refresh<\/span><\/li>\n
                    2. <\/b> Provider upgrade<\/span><\/li>\n
                    3. <\/b> Test execution<\/span><\/li>\n
                    4. <\/b> Backend migration<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 3. Test execution<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      Test execution through terraform test runs defined Terraform test scenarios and evaluates assertions about module behavior. State refresh updates recorded remote values. Provider upgrade changes selected provider packages. Backend migration changes state storage location. Test execution is therefore the correct answer because reusable modules can have automated tests that verify expected plans outputs and infrastructure conditions. Tests help detect regressions when module logic changes. Depending on test configuration some runs may create temporary real infrastructure, so module authors should understand the execution behavior and clean up requirements of each test scenario.<\/span><\/p>\n

                      Q331. Which Terraform setting can make an output available only temporarily without storing it in state<\/b><\/p>\n

                        \n
                      1. <\/b> nullable<\/span><\/li>\n
                      2. <\/b> sensitive<\/span><\/li>\n
                      3. <\/b> description<\/span><\/li>\n
                      4. <\/b> ephemeral<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 4. ephemeral<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        The ephemeral setting can mark a supported output as temporary so its value is not persisted in normal Terraform state or saved plan files. sensitive suppresses normal display but does not prevent persistence. nullable applies to whether input variables may accept null. description documents the purpose of an output. ephemeral is therefore the correct answer because short lived credentials or temporary connection information may need to pass between modules without being permanently recorded. Ephemeral outputs must still be used only in contexts that support ephemeral values, otherwise Terraform cannot safely propagate them through the configuration.<\/span><\/p>\n

                        Q332. Which Terraform concept determines the order in which dependent resources are processed<\/b><\/p>\n

                          \n
                        1. <\/b> Workspace selection<\/span><\/li>\n
                        2. <\/b> Dependency graph<\/span><\/li>\n
                        3. <\/b> Output formatting<\/span><\/li>\n
                        4. <\/b> Provider checksum<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 2. Dependency graph<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          Terraform builds a dependency graph from references and explicit dependency declarations and uses that graph to determine safe operation ordering. Workspace selection determines which state instance is active. Output formatting changes presentation. Provider checksums verify package integrity. Dependency graph is therefore the correct answer because Terraform must know which resources can be processed independently and which must wait for other objects. Correct references usually allow Terraform to infer dependencies automatically. Unnecessary explicit dependencies can reduce parallelism, so depends_on should be used only when a real relationship exists that Terraform cannot infer from ordinary data references.<\/span><\/p>\n

                          Q333. Which Terraform function converts a number into its absolute magnitude<\/b><\/p>\n

                            \n
                          1. <\/b> floor<\/span><\/li>\n
                          2. <\/b> signum<\/span><\/li>\n
                          3. <\/b> abs<\/span><\/li>\n
                          4. <\/b> max<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 3. abs<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            The abs function returns the absolute magnitude of a number, converting negative values into their positive equivalents while leaving positive values unchanged. floor rounds downward. signum reports whether a number is negative zero or positive. max returns the greatest of supplied numeric values. abs is therefore the correct answer because Terraform expressions may occasionally need the magnitude of a difference regardless of direction. Users should confirm that discarding the sign is meaningful for the infrastructure calculation because negative values can sometimes represent an important condition that should instead be validated rather than normalized.<\/span><\/p>\n

                            Q334. Which Terraform block can declare an existing object for import as part of configuration<\/b><\/p>\n

                              \n
                            1. <\/b> import<\/span><\/li>\n
                            2. <\/b> moved<\/span><\/li>\n
                            3. <\/b> removed<\/span><\/li>\n
                            4. <\/b> output<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 1. import<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              An import block declares that an existing remote infrastructure object should be associated with a Terraform resource address. moved blocks describe address changes during refactoring. removed blocks describe objects leaving Terraform management. Output blocks expose selected values. import is therefore the correct answer because configuration driven import allows infrastructure adoption to be reviewed and repeated as part of normal Terraform workflows. The target resource configuration must still exist or be generated appropriately, and users should inspect the following plan carefully to ensure Terraform will not unexpectedly modify the imported object.<\/span><\/p>\n

                              Q335. Which Terraform command can show a saved plan in JSON for external tooling<\/b><\/p>\n

                                \n
                              1. <\/b> terraform output with json<\/span><\/li>\n
                              2. <\/b> terraform show with json<\/span><\/li>\n
                              3. <\/b> terraform validate with json<\/span><\/li>\n
                              4. <\/b> terraform graph<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 2. terraform show with json<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                terraform show with json converts a saved Terraform plan or state representation into structured JSON suitable for external tooling. terraform output with json prints root module outputs only. terraform validate with json reports configuration validation results. terraform graph produces dependency graph information. terraform show with json is therefore the correct answer because policy engines analysis tools and automation systems may need detailed machine readable plan information. Plan JSON can include sensitive infrastructure data, so generated files and logs should be protected according to the same security standards applied to Terraform state and saved plans.<\/span><\/p>\n

                                Q336. Which Terraform function returns a Base64 encoded SHA512 hash of a local file<\/b><\/p>\n

                                  \n
                                1. <\/b> filesha512<\/span><\/li>\n
                                2. <\/b> base64sha512<\/span><\/li>\n
                                3. <\/b> sha512<\/span><\/li>\n
                                4. <\/b> filebase64sha512<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 4. filebase64sha512<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  The filebase64sha512 function reads a local file calculates its SHA512 hash and returns the hash encoded in Base64 form. filesha512 returns hexadecimal output. base64sha512 hashes a string rather than reading file content directly. sha512 also operates on a string and returns hexadecimal output. filebase64sha512 is therefore the correct answer because some provider arguments or external services require a file checksum represented in Base64. The function produces a fingerprint rather than encrypted data, and the referenced file must already exist when Terraform evaluates the expression.<\/span><\/p>\n

                                  Q337. Which Terraform feature can reduce duplication by assigning a complex expression to a reusable name<\/b><\/p>\n

                                    \n
                                  1. <\/b> Local values<\/span><\/li>\n
                                  2. <\/b> State lineage<\/span><\/li>\n
                                  3. <\/b> Backend configuration<\/span><\/li>\n
                                  4. <\/b> Provider checksums<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1. Local values<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    Local values assign names to expressions that can be reused throughout a Terraform module. State lineage identifies the history of state. Backend configuration controls state storage. Provider checksums help verify downloaded packages. Local values is therefore the correct answer because repeated expressions for naming tags transformations or calculated settings can be defined once and referenced using a clear local name. This improves readability and reduces inconsistencies when logic changes. Local values are internal to the module and cannot be assigned directly by callers like input variables.<\/span><\/p>\n

                                    Q338. Which Terraform lifecycle setting ignores selected attribute changes after resource creation<\/b><\/p>\n

                                      \n
                                    1. <\/b> create_before_destroy<\/span><\/li>\n
                                    2. <\/b> prevent_destroy<\/span><\/li>\n
                                    3. <\/b> replace_triggered_by<\/span><\/li>\n
                                    4. <\/b> ignore_changes<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 4. ignore_changes<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      ignore_changes tells Terraform to disregard changes to selected resource attributes during normal update planning after the resource exists. create_before_destroy changes replacement order. prevent_destroy blocks destruction. replace_triggered_by forces replacement based on related changes. ignore_changes is therefore the correct answer when another system intentionally manages certain attributes or when selected provider generated changes should not cause Terraform updates. It should be used cautiously because ignored attributes can drift from configuration without Terraform correcting them. Only attributes that are intentionally outside normal Terraform control should usually be excluded.<\/span><\/p>\n

                                      Q339. Which Terraform variable argument can reject a value that does not satisfy a custom condition<\/b><\/p>\n

                                        \n
                                      1. <\/b> default<\/span><\/li>\n
                                      2. <\/b> validation<\/span><\/li>\n
                                      3. <\/b> description<\/span><\/li>\n
                                      4. <\/b> nullable<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 2. validation<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        The validation argument lets an input variable define a custom condition that supplied values must satisfy. default supplies a fallback value. description documents the variable. nullable controls whether null is accepted. validation is therefore the correct answer because reusable modules can enforce rules beyond basic type checking, such as naming requirements numeric ranges or allowed formats. A validation rule should provide a clear error message so callers understand how to correct their input. Early validation improves module usability and can prevent invalid values from reaching providers where errors may be less understandable.<\/span><\/p>\n

                                        Q340. Which HCP Terraform feature can estimate the financial impact of supported planned infrastructure changes<\/b><\/p>\n

                                          \n
                                        1. <\/b> Run triggers<\/span><\/li>\n
                                        2. <\/b> Projects<\/span><\/li>\n
                                        3. <\/b> Cost estimation<\/span><\/li>\n
                                        4. <\/b> State locking<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 3. Cost estimation<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          Cost estimation can calculate an estimated financial impact for supported infrastructure changes during an HCP Terraform run. Run triggers coordinate dependent workspace runs. Projects organize workspaces. State locking protects state from concurrent modification. Cost estimation is therefore the correct answer because teams may want visibility into expected spending before approving infrastructure changes. Estimates depend on supported providers resource types and available pricing information, so they should be treated as planning guidance rather than exact billing guarantees. Organizations can combine cost information with policy or approval workflows to improve financial governance.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full HashiCorp Terraform Associate 004 Exam Dumps and Practice Test Dumps. Q321. Which Terraform command removes an unused CLI workspace terraform workspace clear terraform workspace remove terraform state rm terraform workspace delete Correct Answer: 4. terraform workspace delete Explanation terraform workspace delete removes an existing Terraform CLI workspace when it is no longer required. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/24848"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=24848"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/24848\/revisions"}],"predecessor-version":[{"id":24849,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/24848\/revisions\/24849"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=24848"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=24848"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=24848"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}