HashiCorp Certified: Terraform Associate (004) (HCTA0-004) - Terraform-Associate-004 Exam Questions [2026]

QUESTION NO: 1
What is the provider for this resource?

A. Vpc B. Test C. aws D. Main

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
The public Terraform Module Registry is free to use.

A. True B. False

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
Your team often uses API calls to create and manage cloud infrastructure. In what ways does Terraform differ from conventional infrastructure management approaches?

A. Terraform is merely a wrapper for cloud provider APIs, so there is little to no difference in calling the API directly. B. Terraform replaces cloud provider APIs with its own protocols, enabling automated deployments. C. Terraform describes infrastructure with version-controlled, repeatable configurations that specify the desired state. D. Terraform enforces infrastructure through imperative scripts to ensure tasks are completed in the proper order.

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
You have provisioned some virtual machines (VMs) on Google Cloud Platform (GCP) using the gcloud command line tool. However, you are standardizing with Terraform and want to manage these VMs using Terraform instead. What are the two things you must do to achieve this? Choose two correct answers.

A. Run the terraform Import-gcp command B. Write Terraform configuration for the existing VMs C. Provision new VMs using Terraform with the same VM names D. Use the terraform import command for the existing VMs

Correct Answer: B,D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
What is one disadvantage of using dynamic blocks in Terraform?

A. They make configuration harder to read and understand B. Dynamic blocks can construct repeatable nested blocks C. They cannot be used to loop through a list of values D. Terraform will run more slowly

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 6
When you run terraform apply, the Terraform CLI will print output values from both the root module and any child modules.

A. True B. False

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 7
When should you use the force-unlock command?

A. When you see a status message stating that you cannot acquire the lock. B. When automatic unlocking has failed. C. When you have a high-priority change. D. When apply has failed due to a state lock.

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 8
When you use a backend that requires authentication, it is best practice to:

A. Configure the authentication credentials in your Terraform configuration files, and store them in version control. B. None of the above. C. Run all Terraform commands on a shared server or container. D. Use environment variables to configure authentication credentials outside of your Terraform configuration.

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 9
What is the purpose of state locking in a remote backend?

A. Encrypts the state in the remote backend. B. Creates a backup of the state file in a secure location. C. Requires every instance of Terraform to use the same provider version. D. Ensures only one instance of Terraform can modify the state at a time.

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 10
Which of the following isnotan advantage of using Infrastructure as Code (IaC) operations?

A. Modify a count parameter to scale resources. B. Public cloud console configuration workflows. C. API-driven workflows. D. Self-service infrastructure deployment. E. Troubleshoot via a Linux diff command.

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 11
A resource block is shown in the Exhibit section of this page. How would you reference the attribute name of this resource in HCL?

A. resource.kubernetes_namespace.example.name B. kubernetes_namespace.test.name C. data.kubernetes.namespace.name D. kubernetes_namespace.example.name

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 12
Which of the following is true about terraform apply?(Pick 2 correct responses)

A. It only operates on infrastructure defined in the current working directory or workspace. B. By default, it does not refresh your state file to reflect the current infrastructure configuration. C. Depending on provider specification, Terraform may need to destroy and recreate your infrastructure resources. D. You must pass the output of a terraform plan command to it. E. You cannot target specific resources for the operation.

Correct Answer: A,C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 13
When declaring a variable, setting the sensitive argument to true will prevent the value from being stored in the state file.

A. True B. False

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).