HashiCorp Updated Terraform-Associate-004 Exam Questions and Answers by asa

Rationale for Correct Answer: terraform plan -destroy does not destroy anything. It only creates a plan that proposes destroying all managed resources. Actual destruction happens only when you run terraform destroy or terraform apply with an approved destroy plan.

Analysis of Incorrect Options (Distractors):

A: Does trigger destruction (interactive approval by default).

B: Incorrect because terraform plan -destroy does not perform destruction.

D: Does trigger destruction and skips the interactive approval prompt.

Key Concept: Difference between planning a destroy and executing a destroy.

The terraform import command allows Terraform to takeexistinginfrastructure andbring it under Terraform’s management.

A (terraform get)is incorrect because it is used to fetch modules.

B (terraform refresh)is incorrect because it only updates Terraform ' s state to match the infrastructure but does not import resources.

D (terraform init)is incorrect because it only initializes the Terraform working directory.

Official Terraform Documentation Reference:

terraform import - HashiCorp Documentation

You can develop a custom provider to manage its resources using Terraform, as Terraform is an extensible tool that allows you to write your own plugins in Go language. You can also publish your custom provider to the Terraform Registry or use it privately.

Rationale for Correct Answer: IaC enables reviewable, version-controlled change proposals (for example, Terraform plans in pull requests). This makes it possible to systematically review proposed infrastructure changes—including automated security/policy checks—before they are applied. That review-and-approve workflow is a direct outcome of defining infrastructure as code and generating an execution plan.

Analysis of Incorrect Options (Distractors):

A: Auto scaling is enabled by cloud services (e.g., ASGs, autoscalers) and can be configured with or without IaC.

B: RBAC is a capability of cloud/IAM platforms and can be managed without IaC (though IaC can codify it).

C: Cost optimization is a practice/process; IaC can help standardize and enforce cost controls, but it’s not “only enabled” by IaC.

Key Concept: IaC enables version control, change review, and pre-deployment validation (plan + policy/security review).