HashiCorp Terraform Associate (004)
TA-004
The industry-standard entry certification for Terraform, the de-facto infrastructure-as-code (IaC) tool used across AWS, Azure, GCP, and beyond. TA-004 (launched Jan 2026, aligned to Terraform 1.12, replacing 003) covers IaC concepts and multi-cloud/hybrid workflows; the core workflow (init, validate, plan, apply, destroy, fmt); providers and state; reading and writing HCL (variables, outputs, functions, resource dependencies, lifecycle meta-arguments, custom conditions/validation, and sensitive data with Vault); modules; remote state, backends, and drift; and HCP Terraform (workspaces, projects, collaboration, governance). It is a knowledge exam — multiple choice and multiple response, no hands-on labs.
57
60 min
70/ 1000
203+
Target Audience
Cloud engineers, DevOps/platform engineers, SREs, and infrastructure practitioners who provision or manage cloud infrastructure with Terraform, and developers moving into infrastructure automation.
Prerequisites
No formal prerequisites. HashiCorp recommends basic familiarity with the Terraform CLI workflow and hands-on experience writing HCL configuration, plus general cloud/IT fundamentals.
Question Types
Language & Recognition
Official Exam Languages
PasslyExam Languages
Recognition Scope
HashiCorp Terraform Associate — the most widely recognized certification for infrastructure as code, vendor-neutral and applicable across all major clouds. 004 replaced 003 in January 2026 and is aligned to Terraform 1.12. Valid for 2 years.
Exam Domains
Understand infrastructure as code (IaC) concepts
Understand Terraform fundamentals (providers & state)
Use the core Terraform workflow
Read, write, and validate Terraform configuration
Interact with Terraform modules
Implement and maintain state
Maintain infrastructure with Terraform
Use HCP Terraform
Recommended Study Plan
- Step 1 · IaC and the core workflow (2–3 days). Review the advantages of IaC and Terraform’s multi-cloud/hybrid, provider-neutral value, and get fluent with the Write→Plan→Apply flow. Distinguish each command precisely: init (downloads providers/modules + configures the backend, runs first), validate (syntax only, no cloud calls), plan (previews, no changes), apply (applies; prompts unless -auto-approve or a saved plan), destroy, and fmt (formatting only). Back up before making changes.
- Step 2 · Providers, variables, and HCL (3–4 days). Learn source and version constraints in required_providers (~> vs >= vs =) and provider aliases (multi-region/account). Organize variables, outputs, and locals, variable precedence (env TF_VAR_* < terraform.tfvars < *.auto.tfvars < -var/-var-file), sensitive, the HCL types (list/set/map/object/tuple), count vs for_each, and common functions (lookup, cidrsubnet, templatefile).
- Step 3 · Validating configuration and lifecycle — the big 004 expansion (3–4 days). Lock in resource vs data source and implicit dependency vs depends_on, then study what is new in 004 in depth: lifecycle meta-arguments (create_before_destroy, prevent_destroy, ignore_changes), custom conditions (variable validation; precondition/postcondition block apply on failure, while a standalone check block only warns), and ephemeral values + Vault to keep secrets out of state. Burn in that recreating is apply -replace (not taint) and reconciling is apply -refresh-only (not refresh) — both deprecated.
- Step 4 · State, backends, and modules (3–4 days). Study local vs remote backends, state locking and clearing a stuck lock (force-unlock), drift (via apply -refresh-only), and protecting state (plaintext secrets). Share values across configurations with the terraform_remote_state data source, and migrate to a remote backend with the backend block + terraform init. For modules: source (local/registry/Git), version (not valid for local paths), output references (module.<name>.<output>), and variable scope (a child only sees inputs passed to it). The CLI terraform import only brings resources into state; an import block with plan -generate-config-out generates configuration.
- Step 5 · HCP Terraform and final review (3–5 days). Learn HCP Terraform remote runs, the private module registry, policy as code (Sentinel/OPA), and organizing with workspaces vs projects vs variable sets and run triggers. Finally, take timed mocks for 57 questions in 60 minutes and drill true/false, negation, and reading short HCL/CLI snippets. Clear the 004 traps: that taint is still current, that terraform refresh is still a standalone command, that a check block blocks apply, or that sensitive = true removes a value from state.
Question Validation Process
Try the practice set directly and judge real-exam similarity yourself.
Frequently Asked Questions
Q. How is TA-004 different from TA-003?
A. TA-004 is the current version that replaced TA-003 in January 2026 and is aligned to Terraform 1.12. The format (about 57 questions, 60 minutes, multiple choice/multiple response/true-false) is the same, but the content was refreshed: HCP Terraform becomes its own expanded domain (workspaces, projects, variable sets); custom conditions (variable validation, precondition/postcondition, check blocks) and lifecycle meta-arguments are tested explicitly; terraform taint is replaced by apply -replace and terraform refresh by apply -refresh-only (both deprecated); and multi-cloud/hybrid plus Vault secrets and ephemeral values were added.
Q. I studied for TA-003 — should I switch to TA-004?
A. If you are testing now, prepare for TA-004. TA-003 retired on January 7, 2026, and only 004 can be taken since then. The fundamentals and core workflow barely change, so your 003 study is not wasted, but you must top up the new and changed 004 topics (custom conditions, lifecycle, -replace/-refresh-only, expanded HCP).
Q. What kinds of questions appear?
A. Most items are short and direct, often a single sentence. Negation questions such as "which of the following is NOT true?" and true/false statements are common, and some questions show a short HCL or CLI snippet and ask what happens. There are no hands-on labs, so knowing exactly how each command and concept behaves matters most.
Q. Which topics weigh the most?
A. Writing configuration (variables, dependencies, custom conditions, lifecycle) and the core workflow weigh the most, followed by state management, modules, and providers. HCP Terraform carries more weight in 004: expect workspaces, projects, variable sets, and policy (Sentinel/OPA). IaC concepts and multi-cloud appear lightly at the start.
Q. What are the common 004 traps?
A. Force-recreating a resource is now apply -replace=ADDR, not taint, and reconciling state is apply -refresh-only, not refresh (both deprecated). A check block only warns and does not block apply, whereas precondition/postcondition do block apply on failure. sensitive = true only redacts CLI output and does not remove a value from state; to truly keep it out, use ephemeral values. The CLI terraform import does not generate configuration (an import block with -generate-config-out does).
Q. What is the cost, how is it taken, and how long is it valid?
A. The fee is about USD 70.50 plus tax, and the exam is taken online with a proctor (Certiverse) from anywhere. The certification is valid for 2 years; you renew by retaking it or by earning a higher HashiCorp certification.
Q. How is it different from cloud certifications, and should I pair them?
A. Where AWS, Azure, and GCP certifications cover a specific cloud, TA-004 validates Terraform itself — the tool you use to automate infrastructure on top of them. It is vendor-neutral and applies to any cloud, so if you already hold a cloud certification it is a strong next step for real automation skills.
Q. How do practice questions and the timed mock exam differ?
A. Practice questions are solved by topic with answer explanations to shore up weak areas; the timed mock exam is taken like the real thing. Both use original questions with AI tutor explanations.
Q. Is this similar to exam dumps?
A. PasslyExam does not provide leaked dumps. Our content is built from official guides and public exam objectives, then tuned to reflect realistic question patterns and difficulty distribution. The focus is practical readiness with explanation-based learning, not memorization of leaked items.
View dump-alternative guide