Terraform Authoring and Operations Professional Free Sample Questions

You are the Lead Terraform Architect for a financial services firm. You are refactoring a large monolithic configuration into smaller, reusable modules to improve maintainability. One specific resource, an aws_s3_bucket named logs, needs to be moved from the root configuration into a new child module named audit_logs. You must ensure that the existing bucket is NOT destroyed and recreated during this refactoring process, as it contains petabytes of compliance data. Which configuration block should you add to your root module to facilitate this state migration?

A DevOps engineer is tasked with importing a legacy EC2 instance into a Terraform configuration. The engineer has written the resource "aws_instance" "legacy" {} block but does not know the exact instance ID required for the import. However, they know the instance has a specific tag Role = "LegacyApp". Which approach allows the engineer to import this resource using Terraform 1.5+ declarative import syntax without manually looking up the ID first?

You are managing a critical production environment where applying a configuration that accidentally changes the user_data of an EC2 instance would trigger a replacement, causing unacceptable downtime. You want to ensure that any future terraform apply fails if it attempts to replace this specific instance due to a change in user_data. Which lifecycle configuration should you apply?

A team is using a Terraform configuration that utilizes the hashicorp/aws provider. They need to ensure that the configuration is compatible with any version of the provider that is at least version 5.0.0 but less than 6.0.0. Which version constraint string correctly expresses this requirement?

You are developing a Terraform module that creates an S3 bucket. You want to validate that the bucket name passed via the input variable bucket_name meets AWS naming requirements: it must be between 3 and 63 characters long and must start with a lowercase letter or number. You decide to use a validation block within the variable declaration. Which configuration correctly implements this?

You are creating a reusable Terraform module for an AWS VPC. The module must accept a list of subnet objects, where each object has a cidr (string) and an optional tags (map of strings). If tags is omitted, it should default to an empty map. Which type constraint correctly defines this input variable using Terraform's optional object attributes feature?

During a terraform apply, you encounter a provider error related to API rate limiting. You need to gather more detailed information about the HTTP requests being made by the AWS provider to debug the issue. Which environment variable should you set to enable the most verbose logging specifically for Terraform core and providers?

You are managing a Terraform configuration that uses a local backend. You have been tasked with migrating this state to an S3 backend with DynamoDB locking. After configuring the backend "s3" block in your terraform.tf file, what is the next command you must run to successfully migrate the existing state data to the new backend?