Free Terraform-Associate-003: HashiCorp Certified: Terraform Associate (003) Exam Questions and Answers
169 verified practice questions for Terraform-Associate-003.
The first 10 questions on this page are free to read, answers included — no account and no card. A plan opens the rest of the bank, the full timed practice test and your weak-topic reporting.
Last updated: September 19, 2026
- Provider
- HashiCorp
- Questions in our bank
- 1000+
- Free to read
- First 10, with answers
- Our test mode duration & pass mark
- 130 mins · 70%
- Verified answers
- Reviewed weekly
- Practice format
- Multiple choice
Recommended: Switch to Test Mode to start a practice test that simulates the real exam experience.
Question #1
How would you reference the volume IDs associated with the ebs_block_device blocks in this configuration?
Please select an optionIncorrectCorrect answer: D
This is the correct way to reference the volume IDs associated with the ebs_block_device blocks in this configuration, using the splat expression syntax. The other options are either invalid or incomplete.
Was this answer correct?Question #2
You've used Terraform to deploy a virtual machine and a database. You want to replace this virtual machine instance with an identical one without affecting the database. What is the best way to achieve this using Terraform?
Please select an optionIncorrectCorrect answer: B
The terraform taint command marks a resource as tainted, which means it will be destroyed and recreated on the next apply. This way, you can replace the VM instance without affecting the database or other resources. References = [Terraform Taint]
Was this answer correct?Question #3
Which option cannot be used to keep secrets out of Terraform configuration files?
Please select an optionIncorrectCorrect answer: D
A secure string is not a valid option to keep secrets out of Terraform configuration files. A secure string is a feature of AWS Systems Manager Parameter Store that allows you to store sensitive data encrypted with a KMS key. However, Terraform does not support secure strings natively and requires a custom data source to retrieve them. The other options are valid ways to keep secrets out of Terraform configuration files. A Terraform provider can expose secrets as data sources that can be referenced in the configuration. Environment variables can be used to set values for input variables that contain secrets. A -var flag can be used to pass values for input variables that contain secrets from the command line or a file. References = [AWS Systems Manager Parameter Store], [Terraform AWS Provider Issue #55], [Terraform Providers], [Terraform Input Variables]
Was this answer correct?Question #4
Terraform configuration can only import modules from the public registry.
Please select an optionIncorrectCorrect answer: B
Terraform configuration can import modules from various sources, not only from the public registry. Modules can be sourced from local file paths, Git repositories, HTTP URLs, Mercurial repositories, S3 buckets, and GCS buckets. Terraform supports a number of common conventions and syntaxes for specifying module sources, as documented in the [Module Sources] page. References = [Module Sources]
Was this answer correct?Question #5
You must initialize your working directory before running terraform validate.
Please select an optionIncorrectCorrect answer: A
You must initialize your working directory before running terraform validate, as it will ensure that all the required plugins and modules are installed and configured properly. If you skip this step, you may encounter errors or inconsistencies when validating your configuration files.
Was this answer correct?Question #6
What does this code do?
Please select an optionIncorrectCorrect answer: A
This is what this code does, by using the pessimistic constraint operator (~>), which specifies an acceptable range of versions for a provider or module.
Was this answer correct?Question #7
terraform validate confirms that your infrastructure matches the Terraform state file.
Please select an optionIncorrectCorrect answer: B
terraform validate only checks that the configuration is syntactically valid and internally consistent; it does not contact providers or compare against state. Use terraform plan (optionally -refresh-only) to compare real infrastructure with state.
Was this answer correct?Question #8
A developer on your team is going to tear down an existing deployment managed by Terraform and deploy a new one. However, there is a server resource named aws_instance.ubuntu[1] they would like to keep. What command should they use to tell Terraform to stop managing that specific resource?
Please select an optionIncorrectCorrect answer: B
To tell Terraform to stop managing a specific resource without destroying it, you can use the terraform state rm command. This command will remove the resource from the Terraform state, which means that Terraform will no longer track or update the corresponding remote object. However, the object will still exist in the remote system and you can later use terraform import to start managing it again in a different configuration or workspace. The syntax for this command is terraform state rm <address>, where <address> is the resource address that identifies the resource instance to remove. For example, terraform state rm aws_instance.ubuntu[1] will remove the second instance of the aws_instance resource named ubuntu from the state. References = : Command: state rm : Moving Resources
Was this answer correct?Question #9
Which of the following statements about Terraform modules is not true?
Please select an optionIncorrectCorrect answer: C
This is not true, as modules can be either public or private, depending on your needs and preferences. You can use the Terraform Registry to publish and consume public modules, or use Terraform Cloud or Terraform Enterprise to host and manage private modules.
Was this answer correct?Question #10
Which of the following is not a valid Terraform collection type?
Please select an optionIncorrectCorrect answer: A
This is not a valid Terraform collection type, as Terraform only supports three collection types: list, map, and set. A tree is a data structure that consists of nodes with parent-child relationships, which is not supported by Terraform.
Was this answer correct?
Continue with Terraform-Associate-003: HashiCorp Certified: Terraform Associate (003)
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in Terraform-Associate-003: HashiCorp Certified: Terraform Associate (003), the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
Other HashiCorp certifications
- HashiCorp Certified: Terraform Associate (opens in a new tab)
- Terraform-Associate-004: HashiCorp Certified: Terraform Associate (004) (HCTA0-004) (opens in a new tab)
- HCVA0-003: HashiCorp Certified: Vault Associate (003)Exam (opens in a new tab)
- Vault Associate 002: HashiCorp Certified: Vault Associate (002) (opens in a new tab)
Reviews
★★★★★
This platform is a lifesaver. The practice questions and explanations are so detailed. It’s the best study tool I’ve ever used.
Hannah Smith
USA
★★★★★
I highly recommend Exam Practice. The feedback after each test helped me improve significantly, and I passed my exams easily.
Oscar Nyström
Sweden
★★★★★
Exam Practice is worth every penny. The mock exams are realistic, and the feedback helped me focus on key areas.
Amit Sharma
India
FAQ
Learn More: https://developer.hashicorp.com/certifications/infrastructure-automation
- Q1: What are HashiCorp Certification Exams?
- A: HashiCorp Certification Exams validate your expertise in using HashiCorp’s suite of infrastructure automation products, including Terraform, Vault, Consul, and Nomad. These certifications demonstrate your proficiency in deploying, configuring, and managing cloud infrastructure and security using HashiCorp tools.
- Q2: Why should I pursue HashiCorp Certification?
- A: HashiCorp Certification enhances your professional credibility, showcasing your skills and knowledge in cloud infrastructure and automation. This can lead to better job opportunities, higher salaries, and career advancement in IT, DevOps, and cloud engineering roles.
- Q3: What are the benefits of HashiCorp Certification?
- A: Benefits include recognition as a certified infrastructure automation professional, improved job performance, access to exclusive resources, continuing education opportunities, and staying current with the latest HashiCorp technologies and best practices.
- Q4: Who should take HashiCorp Certification Exams?
- A: IT professionals, DevOps engineers, system administrators, cloud engineers, and anyone involved in managing and automating cloud infrastructure should consider these certifications to validate their expertise and advance their careers.
- Q5: What types of HashiCorp Certification Exams are available?
- A: HashiCorp offers various certification paths, including:
- Q6: How do I prepare for HashiCorp Certification Exams?
- A: Preparation can include official HashiCorp training courses, study guides, practice exams, online tutorials, and hands-on experience with HashiCorp tools and solutions.
- Q7: Where can I take HashiCorp Certification Exams?
- A: HashiCorp Certification Exams can be taken online through remote proctoring, providing flexibility to fit your schedule and location.
- Q8: How do HashiCorp Certifications impact my career?
- A: HashiCorp Certifications significantly boost your career by demonstrating your expertise to employers, making you a more competitive candidate for advanced roles and promotions in IT, DevOps, and cloud engineering.
- Q9: Are there any prerequisites for HashiCorp Certification Exams?
- A: Some exams may have prerequisites, such as foundational knowledge or prior experience with HashiCorp tools. Check the specific requirements for each certification path on the HashiCorp website.
- Q10: How often do I need to recertify for HashiCorp Certifications?
- A: HashiCorp Certifications typically require recertification every two years to ensure that certified professionals stay updated with the latest infrastructure automation technologies and industry practices.