HashiCorp · Terraform-Associate
HashiCorp Certified: Terraform Associate Practice Tests
Validates knowledge of infrastructure as code concepts and the ability to use HashiCorp Terraform in production, covering resource lifecycle management, HCL configuration, providers and modules, state management, and collaborative workflows with HCP Terraform.
Exam Details
Practice Questions
628
≈ 11 practice exams
Duration
60 minutes
Passing Score
70%
Difficulty
AssociateLast Updated
Feb 2026
HashiCorp Certified: Terraform Associate Practice Exam Preparation
Use this Terraform-Associate practice exam to prepare for HashiCorp Certified: Terraform Associate with realistic questions, detailed explanations, and focused study modes. The practice bank includes 628 questions for HashiCorp Terraform-Associate, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to patterns in your missed answers. Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
Exam Overview
The HashiCorp Certified: Terraform Associate (004) validates foundational knowledge of infrastructure as code (IaC) using HashiCorp Terraform Community Edition and HCP Terraform. The certification demonstrates that a candidate understands core Terraform concepts including the resource lifecycle, HCL configuration syntax, provider and module usage, state management, and collaborative workflows. Version 004 of the exam covers Terraform 1.12 and introduces updated objectives around lifecycle rules such as `depends_on` and `create_before_destroy`, custom configuration validation conditions, ephemeral values and write-only arguments for sensitive data handling, and HCP Terraform workspace and project organization.
This certification is widely recognized across the cloud and DevOps industry as a benchmark for Terraform proficiency. It is delivered online via Certiverse, proctored remotely, and is valid for two years from the date of passing. Recertification is available by passing the same exam or a higher-level Terraform exam within six months of expiration. The credential includes a digital badge issued through Credly, suitable for sharing on LinkedIn, resumes, and professional profiles.
Who Should Take This Exam
The Terraform Associate is designed for cloud engineers, DevOps engineers, and infrastructure practitioners who work with or are transitioning into infrastructure automation roles. Candidates are expected to have foundational Terraform skills—either through professional production experience or hands-on work in a personal or demo environment. The exam is appropriate for those in roles such as Cloud Infrastructure Engineer, DevOps Engineer, Site Reliability Engineer, or Platform Engineer who use Terraform to provision and manage cloud or on-premises resources.
Candidates should have basic terminal proficiency and a working understanding of on-premises and cloud architecture. The exam is not intended for complete beginners to cloud infrastructure but is well-suited for those who have completed introductory Terraform tutorials and want to formalize their knowledge with a vendor-recognized credential.
Prerequisites
HashiCorp does not mandate formal prerequisites for the Terraform Associate exam, but recommends that candidates possess basic terminal skills and a general understanding of on-premises and cloud architecture prior to sitting the exam. Familiarity with at least one major cloud provider (AWS, Azure, or GCP) and its core services is beneficial, though provider-specific knowledge is explicitly not tested on the exam itself.
Professional experience using Terraform in production is recommended but not required—HashiCorp acknowledges that performing the exam objectives in a personal or demo environment may be sufficient preparation. Candidates should be comfortable reading and writing HCL configuration files, running Terraform CLI commands, and understanding concepts such as state, providers, modules, and the plan/apply workflow before attempting the exam.
Exam Format
The Terraform Associate (004) is a 60-minute, online-proctored exam delivered through the Certiverse platform. The exam consists of approximately 57–60 questions in multiple-choice format, including true/false, single-select, and multi-select question types. The exam is available only in English. The registration fee is $70.50 USD plus applicable taxes and fees.
HashiCorp uses a scaled scoring model and does not publicly disclose the exact number of scored versus unscored items. The passing score is broadly understood to require approximately 70% mastery across all domains. Candidates receive a pass/fail result immediately upon completion, with detailed objective-level performance feedback delivered within approximately 48 hours. The resulting credential is valid for two years.
Skills Measured
- 1.Domain 1 – Infrastructure as Code (IaC) with Terraform: Covers the advantages of IaC over manual provisioning, Terraform's place in the IaC ecosystem, and how Terraform enables multi-cloud and hybrid infrastructure workflows.
- 2.Domain 2 – Terraform Fundamentals: Covers installing and configuring providers, writing multi-provider configurations, understanding the role of the state file, and core Terraform concepts such as resources, data sources, and version constraints.
- 3.Domain 3 – Core Terraform Workflow: Covers the standard init → validate → fmt → plan → apply → destroy lifecycle, understanding execution plans, and how Terraform handles infrastructure changes idempotently.
- 4.Domain 4 – Terraform Configuration: Covers HCL syntax for resources and data sources, input variables, output values, complex types, built-in functions, expressions, resource dependencies, lifecycle meta-arguments (`depends_on`, `create_before_destroy`), and sensitive data management including ephemeral values and write-only arguments.
- 5.Domain 5 – Terraform Modules: Covers sourcing modules from the Terraform Registry and other sources, module composition, variable and output scope, module versioning, and how to use and create reusable configuration modules.
- 6.Domain 6 – Terraform State Management: Covers local versus remote backends, configuring remote state with HCP Terraform and other backends, state locking, the `terraform state` CLI commands, and detecting and reconciling resource drift.
- 7.Domain 7 – Maintain Infrastructure with Terraform: Covers importing existing infrastructure into Terraform state using the `import` block and CLI, using `moved` and `removed` blocks, inspecting state with CLI commands, and enabling verbose logging for troubleshooting.
- 8.Domain 8 – HCP Terraform: Covers creating and managing infrastructure via HCP Terraform, remote operations, workspace and project organization, variable sets, policy enforcement with Sentinel or OPA, collaboration features, and the differences between HCP Terraform Free, Plus, and Enterprise tiers.
Study Tips
- Follow the official HashiCorp Learning Path for Terraform Associate 004 at developer.hashicorp.com/terraform/tutorials/certification-004/associate-study-004 — it maps every exam objective to specific documentation pages and hands-on tutorials, providing the most authoritative study sequence.
- Use the official Exam Content List (associate-review-004) to cross-reference each objective against its corresponding HashiCorp docs page; for any objective you cannot explain in your own words, read that documentation section and run the associated tutorial in a live environment.
- Practice the 004-specific additions deliberately: set up configurations that use `depends_on`, test `create_before_destroy` lifecycle behavior, write custom validation conditions with `precondition`/`postcondition` blocks, and use `ephemeral` resources or write-only arguments to handle sensitive values.
- Attempt the official sample questions published at developer.hashicorp.com/terraform/tutorials/certification-004/associate-questions-004 to calibrate your familiarity with the multi-select and true/false question formats; pay attention to questions about HCP Terraform workspace tiers and feature availability.
- Build a hands-on lab environment where you deploy real infrastructure using HCP Terraform: create workspaces, organize them into projects, configure variable sets, and run remote plans and applies — HCP Terraform governance and collaboration features carry significant weight in Domain 8.
- Study the differences between Terraform Community Edition and HCP Terraform thoroughly, particularly around remote state storage, Sentinel/OPA policy enforcement, audit logging, and the Free vs. Plus vs. Enterprise feature matrix, as these distinctions are a common source of exam questions.
- Review the `terraform state` subcommands (`list`, `show`, `mv`, `rm`, `pull`, `push`), the `moved` block, the `removed` block, and the `import` block syntax — infrastructure maintenance and state manipulation tasks appear consistently across exam objectives 6 and 7.
Career Benefits
Earning the Terraform Associate credential positions engineers competitively for roles that require infrastructure automation expertise, including Cloud Infrastructure Engineer, DevOps Engineer, Platform Engineer, and Site Reliability Engineer. According to HashiCorp, 88% of exam takers agree that passing a HashiCorp Associate-level exam makes job candidates more desirable to employers. Terraform's dominant position in the IaC market — used by organizations across every major industry vertical — means the certification is recognized by a broad range of employers and is frequently listed as a preferred or required qualification in infrastructure-related job postings.
The Terraform Associate complements cloud provider certifications (AWS, Azure, GCP) by validating multi-cloud, provider-agnostic infrastructure skills that those vendor-specific certs do not cover. It is commonly pursued alongside or after an associate-level cloud certification to build a well-rounded infrastructure credential profile. For engineers looking to advance further, HashiCorp offers the Terraform Authoring and Operations Professional certification as a logical next step, validating advanced production-level Terraform expertise.
Sample Questions
5 sample questions with answers and explanations. The full bank has 628 questions, enough for 11 full-length practice exams.
Preview — answers shown1. A Terraform configuration includes a local-exec provisioner that runs a script to register a newly created EC2 instance with an external monitoring system. The team wants the provisioner to execute only when the instance is being destroyed, not during creation. Which configuration accomplishes this requirement? (Select one!)
Aprovisioner "local-exec" { when = "destroy", command = "./deregister.sh ${self.id}" }
Bprovisioner "local-exec" { when = destroy, command = "./deregister.sh ${self.id}" }
CUse a destroy provisioner block instead of provisioner block
Dprovisioner "local-exec" { on_failure = continue, command = "./deregister.sh ${self.id}" }
Explanation
The when argument in a provisioner block accepts two string values: create (default) or destroy. Setting when = "destroy" ensures the provisioner only runs during resource destruction. The syntax requires quotes around the destroy value. The when argument without quotes is invalid syntax. The on_failure argument controls behavior when provisioners fail but does not control timing of execution. There is no separate destroy provisioner block type in Terraform.
2. A configuration uses a dynamic block to generate multiple security group ingress rules based on a variable. The team discovers that Terraform does not support generating certain block types dynamically. Which block type CANNOT be generated using dynamic blocks? (Select one!)
Aingress blocks within security groups
Btag blocks within resources
Clifecycle blocks
Denvironment variable blocks in container definitions
Explanation
Dynamic blocks cannot generate lifecycle or provisioner blocks because these are meta-arguments that control Terraform's behavior rather than provider-managed resource configurations. Lifecycle blocks must be statically defined in the configuration. Ingress blocks within security groups are typical resource-specific nested blocks that can be generated dynamically. Tag blocks and environment variable blocks are also resource-specific configurations that support dynamic generation. The limitation specifically applies to Terraform meta-arguments like lifecycle and provisioners, not to provider-managed resource arguments.
3. An infrastructure engineer configures a database resource with the following lifecycle block. What will happen if the engineer removes the entire resource block from the configuration and runs terraform apply? (Select one!)
ATerraform will destroy the resource despite the prevent_destroy setting
BTerraform will prompt for manual confirmation before destroying the resource
CTerraform will migrate the resource to unmanaged state without destroying it
DTerraform will error and refuse to destroy the resource due to prevent_destroy setting
Explanation
The prevent_destroy lifecycle argument only blocks destruction when modifying resource arguments that require replacement. When you completely remove a resource block from configuration, Terraform treats this as an intentional deletion and proceeds with destruction. The prevent_destroy setting does not protect against configuration removal. To safely remove resources from management without destroying them, use terraform state rm or the removed block with destroy set to false.
4. A security-conscious organization requires that all Terraform state files stored in Amazon S3 must be encrypted at rest, encrypted in transit, and include automatic state locking to prevent concurrent modifications. The team uses Terraform 1.12 and wants to eliminate dependency on external services for locking. Which backend configuration meets all requirements with minimum infrastructure dependencies? (Select one!)
AS3 backend with encrypt equals true, use_lockfile equals true, and HTTPS endpoint
BS3 backend with encrypt equals true, DynamoDB table for locking, and HTTPS endpoint
CS3 backend with KMS encryption and etcd backend for distributed locking
DS3 backend with server-side encryption enabled and consul backend for state locking
Explanation
Terraform 1.10 introduced S3 native locking via use_lockfile equals true, which creates dot-tflock files in S3 and eliminates the DynamoDB requirement. Combined with encrypt equals true for at-rest encryption and the default HTTPS endpoint for transit encryption, this configuration meets all requirements with only S3 infrastructure. The DynamoDB approach works but requires provisioning and managing an additional service. Using Consul or etcd for locking introduces unnecessary complexity and additional infrastructure when S3 native locking is available. KMS encryption is more complex than necessary when basic S3 encryption suffices.
5. An operations team uses HCP Terraform Projects to organize workspaces for different applications. What advantage do Projects provide over organizing workspaces individually? (Select one!)
AProjects allow sharing state files between multiple workspaces
BProjects eliminate the need for workspace-level variables
CProjects automatically merge configurations from multiple workspaces
DProjects enable hierarchical permission inheritance for workspace access control
Explanation
HCP Terraform Projects organize workspaces into logical groups with inherited permissions, enabling hierarchical access control. Teams can grant permissions at the project level which automatically applies to all workspaces within that project, simplifying permission management. Projects do not enable state file sharing between workspaces as each workspace maintains independent state. Projects do not merge configurations from different workspaces. Workspace-level variables are still required for workspace-specific configuration.
$17.99
One-time access to this exam
628 questions (11 practice exams' worth)
Unlimited timed exam simulations
Yours forever — no subscription
Detailed explanations
Free preview stays available