Terraform-Associate-004 Exam Dumps - HashiCorp Certified: Terraform Associate (004) (HCTA0-004)

Rationale for Correct Answer: A moved block tells Terraform that an object’s address in state has changed (renamed/refactored) and it should move the state from the old address to the new address. This preserves the existing real resource and prevents unnecessary destroy/recreate.

Analysis of Incorrect Options (Distractors):

A: Works but is unnecessarily risky/extra work; moved is the intended refactoring mechanism for renames.

B: Incorrect—refresh-only updates state to match real infrastructure, but it does not remap an object from one address to another.

C: Incorrect—Terraform will treat the new name as a new resource address and the old one as removed unless you explicitly move/rename state.

Key Concept: Refactoring addresses safely using moved blocks (state address migration).

This is what you must do to successfully retrieve this value from your networking module, as it will expose the attribute as an output value that can be referenced by other modules or resources. The error message indicates that the networking module does not have an output value named vnet_id, which causes the reference to fail.

This is the command that does not cause Terraform to refresh its state, as it only lists the resources that are currently managed by Terraform in the state file. The other commands will refresh the state file before performing their operations, unless you use the -refresh=false flag.

This command will check if all code in a Terraform configuration that references multiple modules is properly formatted without making changes, and will return a non-zero exit code if any files need formatting. The other commands will either make changes, list the files that need formatting, or not check the modules.

Rationale for Correct Answer (B):

IaC best practice is to manage infrastructure through version-controlled code. Changes should be reviewed and approved (via PRs), ensuring collaboration, traceability, and automation.

Analysis of Incorrect Options:

A, D, E: Making direct/manual changes bypasses IaC practices and causes drift.

C: Running code without PR review skips collaboration and approval.

Key Concept:

Infrastructure as Code emphasizes version control + peer review + automation.

Detailed Explanation:

Rationale for Correct Answer: In Terraform, each “provider” plugin is responsible for interacting with a specific API surface (for example: AWS, AzureRM, Google, Kubernetes). If you want to manage resources across multiple cloud platforms, you typically configure and use the corresponding provider plugins (e.g., aws, azurerm, google). This matches Terraform’s provider model: providers are the integration points to external services.

Analysis of Incorrect Options (Distractors):

B: Incorrect. While a single provider can sometimes manage multiple services within a platform, managing different cloud providers (AWS vs Azure vs GCP) requires their respective provider plugins/configurations.

Key Concept: Providers are Terraform’s integration layer to each infrastructure platform/API.

This is the type of block that is used to construct a collection of nested configuration blocks, by using a for_each argument to iterate over a collection value and generate a nested block for each element. For example, you can use a dynamic block to create multiple ingress rules for a security group resource.

In Terraform Cloud, you can switch between workspaces using both the web UI and CLI. The statement that you " must use the CLI " is false. Workspaces can securely store cloud credentials, offer role-based access control, and integrate with VCS to trigger plan and apply operations.