Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Hashicorp
Exam Format
240 min
12 multiple-choice questions + 4 lab-based scenarios
Not publicly disclosed by HashiCorp
Professional
Registration
$295 USD
Online Proctored (Certiverse) or online proctoring
English
Validity
2 years
Retake the Terraform Authoring & Operations Professional exam starting 6 months before expiration; If expired, retake the exam at any time for a new set of credentials
TAO-PRO Exam Topics and Domains
TAO-PRO is organized into 6 weighted domains. Expect to work with .terraform.lock.hcl, moved blocks, HCL built-in functions, required_providers, and more.
1
Manage Resource Lifecycle
20%
Initialize a configuration using terraform init and its options
Initialization overview and workflowInit CLI command options
- Initialize a Terraform working directory with proper configuration
- Understand the purpose and impact of terraform init flags
- Troubleshoot initialization failures
Generate an execution plan using terraform plan and its options
Plan command and its outputResource targeting in plans
- Generate and interpret execution plans
- Use plan options to scope and control operations
- Save and apply plan files
Apply configuration changes using terraform apply and its options
Apply command workflow
- Apply Terraform configuration changes to provision and update infrastructure
- Use apply options appropriately for different workflows
Destroy resources using terraform destroy and its options
Destroy command and targeted destruction
- Destroy Terraform-managed infrastructure safely
- Use targeted destroy for specific resources
Manage resource state, including importing resources and reconciling resource drift
State management fundamentalsImporting existing resourcesResource address refactoring with moved blocksReconciling resource drift
- Import existing infrastructure into Terraform state
- Use moved blocks to refactor resource addresses
- Detect and reconcile resource drift
- Manipulate state using CLI commands
2
Develop and Troubleshoot Dynamic Configuration
25%
Use language features to validate configuration
Terraform testsChecks and assertionsInput variable validationCustom conditions (preconditions and postconditions)
- Validate configuration using tests, checks, and custom conditions
- Write effective variable validation rules
- Implement preconditions and postconditions for resources
Query providers using data sources
Data source configuration and usage
- Query providers for existing resource data using data sources
- Use data source attributes in other resource configurations
Compute and interpolate data using HCL functions
String, collection, and numeric functionsFile, encoding, and date/time functions
- Use HCL functions to compute and transform data
- Select appropriate functions for different scenarios
- Chain functions together for complex data manipulation
Use meta-arguments in configuration
Resource meta-arguments
- Use meta-arguments to reduce redundant code and control resource lifecycle
- Understand the implications of each meta-argument
Configure input variables and outputs, including complex types
Complex variable typesExpressions and operators
- Configure input variables with complex types
- Write outputs that expose computed values
- Use advanced expressions for dynamic configuration
Analyze best practices for managing sensitive data, such as using Vault for secrets management
Sensitive data handling
- Manage sensitive data securely in Terraform configuration
- Understand where sensitive data appears in state and outputs
- Use Vault or environment variables for secrets management
3
Develop Collaborative Terraform Workflows
15%
Manage the Terraform binary, providers, and modules using version constraints
Version constraints syntax and behaviorDependency lock file management
- Write effective version constraints for Terraform, providers, and modules
- Manage the dependency lock file
- Upgrade providers and modules safely
Configure remote state
Remote state backends
- Configure remote state storage using S3 backend
- Implement state locking for collaborative workflows
- Migrate state between backends
Use the Terraform workflow in automation
Automating Terraform operations
- Adapt Terraform workflows for automated execution
- Handle plan review and approval in CI/CD pipelines
- Manage state locking in automated environments
Share data across configurations and workspaces
Cross-configuration data sharing
- Share data between Terraform configurations using remote state
- Use terraform_remote_state and tfe_outputs data sources
- Design outputs for cross-configuration consumption
4
Create, Maintain, and Use Terraform Modules
20%
Create a module
Module structure and design
- Create reusable Terraform modules following recommended patterns
- Design effective module interfaces with variables and outputs
Use a module in configuration
Module sourcing and declaration
- Source modules from various locations
- Declare and configure modules in root configuration
- Access module outputs and use module meta-arguments
Refactor a module and use module versioning
Module versioningModule refactoring
- Manage module versions and upgrades
- Refactor modules using moved blocks without resource destruction
Refactor an existing configuration into modules
Configuration-to-module refactoring
- Refactor flat configuration into modular structure
- Use moved blocks to migrate resources into modules
- Maintain state consistency during refactoring
5
Configure and Use Terraform Providers
10%
Understand Terraform's plugin-based architecture
Provider architecture
- Understand how Terraform's plugin-based architecture works
- Describe the provider discovery and installation process
Configure providers, including aliasing, versioning, sourcing, and managing upgrades
Provider configuration and aliasingProvider versioning and lock file
- Configure providers with aliasing for multi-region or multi-account deployments
- Manage provider versions and upgrades
- Pass provider configurations to child modules
Manage provider authentication
Authentication methods
- Configure provider authentication using various methods
- Understand credential precedence and best practices
Troubleshoot provider errors
Provider troubleshooting
- Enable and interpret Terraform debug logs
- Diagnose and resolve provider-related errors
- Troubleshoot lock file and version conflicts
6
Collaborate on Infrastructure as Code Using HCP Terraform
10%
Analyze the HCP Terraform run workflow
Run workflow and modesMigration to HCP Terraform
- Understand the HCP Terraform run workflow and its modes
- Configure run triggers and run tasks
- Migrate existing configurations to HCP Terraform
Understand HCP Terraform workspaces and their configuration options, including access management
Workspace configuration and access
- Configure HCP Terraform workspaces for different workflows
- Manage team access and permissions
- Understand workspace types and execution modes
Manage provider credentials in HCP Terraform
Credential management in HCP Terraform
- Manage provider credentials securely in HCP Terraform
- Configure dynamic provider credentials
- Understand variable types and precedence in HCP Terraform
Analyze policy as code and governance features
Policy enforcement
- Understand policy as code frameworks in HCP Terraform
- Configure and enforce policies for governance
- Differentiate policy enforcement levels
How do I earn this certification?
Passing TAO-PRO earns the HashiCorp Certified: Terraform Authoring and Operations Professional certification. It sits in the Infrastructure Automation track.
Alternative Paths
- Vault-Ops-Pro - Vault Operations ProfessionalSecond professional-level HashiCorp certification, complementary for infrastructure security
- VA-003 - Vault Associate (003)Expand HashiCorp expertise into secrets management (referenced in TAO-Pro Domain 2f)
- CA-003 - Consul Associate (003)Expand HashiCorp expertise into service networking and mesh
- SAA-C03 - AWS Solutions Architect AssociateDeepen AWS knowledge that complements Terraform AWS provider expertise
- DOP-C02 - AWS DevOps Engineer ProfessionalProfessional-level AWS certification focused on CI/CD and IaC operations
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for TAO-PRO is by using the PlanetCert Simulator to practice questions and review detailed explanations.
Who should take this exam?
Extensive production experience using Terraform with the AWS provider
- HashiCorp Certified: Terraform Associate certification (strongly recommended)
- Linux skills - ability to list and edit files via command terminal
- Experience with YAML, JSON, HCL, CSV file formats
- Understanding of the networking stack and protocols including TCP/IP and UDP
- Experience using cloud credentials
- Advanced configuration authoring skills
- Deep understanding of Terraform workflows
- Knowledge of Terraform language best practices