EnglishDeutschFrançaisEspañolPortuguês

HashiCorp · HC-TFP · Advanced

HashiCorp Terraform Authoring and Operations Advanced — Practice Questions and Mock Exam

Formerly: HashiCorp Certified: Terraform Authoring and Operations Professional

The HashiCorp Certified: Terraform Authoring and Operations Advanced credential validates advanced, production-grade expertise with Terraform and HCP Terraform.

Practice for freeTry a practice question first
Try a practice question firstPractice for free
Start practicing HC-TFP freeBuy HC-TFP access for $29.99
240minPass-IT mock exam time limit

Checked against HashiCorp · September 2026 · Current exam version

Try Pass-IT

See what learning with Pass-IT is like.

Answer a HC-TFP sample question and read the explanation with its source. Right here, with no sign-up.

Collaborate on infrastructure as code using HCP Terraform1 / 5

An HCP Terraform workspace is connected to a VCS repository with `Branch: main` and `Working Directory: infra/`. Which event automatically queues a plan?

AlexFull explanation from Alex

VCS-driven HCP Terraform workspaces register webhooks and queue runs only when commits land on the configured branch and modify files within the configured working directory. With Branch: main and Working Directory: infra/, only commits to main touching infra/ trigger a plan. The option “Any commit to any branch of the connected repository” ignores both branch and directory filters. The option “Commits whose message contains "[apply]" or "[plan]"” describes a commit-message convention HCP Terraform does not support. The option “A pull request opened against any branch of the repo” confuses speculative plans (triggered by PRs) with the auto-queued plan behavior tied to branch commits. Ref: developer.hashicorp.com/terraform/cloud-docs/workspaces/settings; /terraform/cloud-docs/workspaces/run/ui

Sourcedeveloper.hashicorp.com

Develop Collaborative Terraform Workflows2 / 5

Which optional argument in the `backend "s3"` block enables state locking via a managed table?

AlexFull explanation from Alex

The S3 backend's dynamodb_table argument specifies a DynamoDB table (with a String partition key named LockID) that Terraform uses for distributed state locking during operations, preventing concurrent modifications that could corrupt state. lock_table, state_lock, and ddb_lock are not valid arguments and would cause terraform init errors. Newer Terraform versions also support native S3 conditional-write locking, but dynamodb_table remains the long-standing mechanism. Ref: developer.hashicorp.com/terraform/language/backend/s3#state-locking; /terraform/language/state/locking

Sourcedeveloper.hashicorp.com

Develop and Troubleshoot Dynamic Configuration4 / 5

Which block lets you enforce that a variable's value matches a specific format, such as starting with `vpc-`?

AlexFull explanation from Alex

A validation block inside a variable definition runs a custom condition expression (e.g., can(regex(^vpc-, var.id))) and surfaces an error_message if the value fails, enforcing input format at plan time. precondition belongs inside lifecycle blocks on resources/data sources for runtime assertions. check is a top-level block for ongoing assertions against infrastructure state. lifecycle is a resource meta-argument controlling create_before_destroy and similar behaviors, not variable input validation. Ref: developer.hashicorp.com/terraform/language/values/variables#custom-validation-rules

Sourcedeveloper.hashicorp.com

Create, Maintain, and Use Terraform Modules5 / 5

Which meta-argument lets a module be called once per element of a map, producing one instance of the module per key?

AlexFull explanation from Alex

for_each accepts a map or set of strings and creates one module instance per element, each addressable as module.name["key"] (Ref: developer.hashicorp.com/terraform/language/meta-arguments/for_each). It is the recommended approach when instances are logically identified by a key rather than a numeric index, because adding or removing keys does not shift other instances. count creates instances by index and is fragile when the collection changes order — a removed middle element renumbers all subsequent ones. providers maps provider configurations into a child module. depends_on declares explicit ordering dependencies but does not create instances.

Sourcedeveloper.hashicorp.com

How to prepare for HC-TFP with Pass-IT.

Currently 401 practice questions for HC-TFP, with new ones added regularly. Focus on what you still need to learn.

Get past difficult questions.

Understand why an answer is correct. Alex explains the concepts and answers your follow-up questions so you can apply what you learn to the next task.

Meet Alex →

Conversation preview · HC-TFP

Provider installation location

  1. You

    Where does init put a downloaded provider for this directory?

  2. Alex · AI tutor

    Terraform installs the working directory’s provider plugins under .terraform.

    Read the documentation ↗
  3. You

    Should I commit those binaries with my configuration?

  4. Alex · AI tutor

    No. They are downloaded artifacts that init can prepare again.

    Read the documentation ↗

Make your study time count.

Practice at your level.
For new practice sessions, Pass-IT adjusts the difficulty based on your previous answers.

Learn from mistakes.
Incorrect answers automatically become flashcards. When you review them, you rate how confidently you remember; Pass-IT schedules the next review.

See how focused practice works →

Animated feature preview

Turn your mistakes into knowledge you can rely on.

How Pass-IT works

Your review

Answered a question incorrectly?

Pass-IT saves it for your review.

HC-TFP · Question excerpt

Provider installation location

View the full question

When `terraform init` downloads a provider from the Terraform Registry because no acceptable version is installed, where does it save the plugin?

Understand the correct answer.

In a subdirectory under .terraform/providers/

Downloaded provider plugins belong under .terraform, not in version control.

Read the documentation ↗

How confidently do you remember?

During review, you assess how well you still know the answer.

Correct after hesitating

Pass-IT schedules your next review.

The date depends on your self-assessment and previous reviews.

Simplified demonstration. No learning progress is saved.

Practice for the moment that counts.

Take a full mock exam with a time limit and find out whether you can finish in time.

Go into your exam with more confidence.

Your Readiness Score helps you assess whether you are ready for the exam. Results by exam domain show you where you should keep practicing.

Your money back if you fail despite 80% Readiness.
If your Readiness Score is at least 80% when you take the exam and you still fail, we refund the Pass-IT purchase price for this certification.

For active, paid access. Submit proof of failing within 14 days.

Further guarantee conditions

You need at least 80% Readiness and active, paid access to the certification when you take the exam. Take the exam within your access period and submit official proof of failing within 14 days after the exam.

For purchases through Apple or Google, refunds are handled by the respective store. See the full terms for further details.

Read the guarantee terms →

The Readiness Score describes your practice progress, not a probability of passing.

Guarantee requirement

80%

At least 80% Readiness
when you take the exam

Money back if you fail

Question counts and mock exam settings from the current Pass-IT catalog.

Exam domains

What you practice for HC-TFP.

Exam topics, relevant practice and sources you can check.

Resource lifecycle managementSee the guide for weighting73 QuestionsPass-IT questions

Control infrastructure changes with Terraform commands and state.

  • Use terraform init and terraform plan with options suited to the configuration.
  • Apply changes or destroy resources with the appropriate command options.
  • Import resources and reconcile drift by managing Terraform state.
Official certification objectives
Dynamic configurationSee the guide for weighting65 QuestionsPass-IT questions

Build and troubleshoot reusable HCL expressions and data flows.

  • Query providers through data sources and compute or interpolate values with HCL functions.
  • Use meta-arguments, input variables, outputs and complex types to shape dynamic configuration.
  • Validate configuration with language features and manage sensitive values, including secrets held in Vault.
Official certification objectives
Collaborative workflowsSee the guide for weighting70 QuestionsPass-IT questions

Keep shared and automated Terraform work predictable.

  • Set version constraints for the Terraform binary, providers and modules.
  • Configure remote state and share data across configurations and workspaces.
  • Run the Terraform workflow in automation with the appropriate execution sequence.
Official certification objectives
Module developmentSee the guide for weighting68 QuestionsPass-IT questions

Create reusable modules and evolve existing configuration.

  • Create a module and use it from another configuration.
  • Refactor modules and manage versions as their interfaces change.
  • Restructure existing configuration into modules while preserving its intended behavior.
Official certification objectives
Provider configurationSee the guide for weighting61 QuestionsPass-IT questions

Configure the plugins that connect Terraform to services.

  • Explain Terraform’s plugin architecture and select provider sources and versions.
  • Configure provider aliases, authentication and upgrades.
  • Diagnose provider errors and correct the relevant configuration.
Official certification objectives
Collaborating through HCP TerraformSee the guide for weighting64 QuestionsPass-IT questions

Manage shared runs, credentials and governance.

  • Explain the HCP Terraform run workflow and configure workspaces and their access settings.
  • Manage provider credentials used by HCP Terraform.
  • Analyze policy as code and governance controls for shared infrastructure work.
Official certification objectives
Question formats you can practice
Multiple Choice
Select one answer.

These are practice formats in Pass-IT. See the Official certification objectives for the official exam requirements.

Frequently asked questions

Your preparation

How much study time should I plan for HC-TFP?

For planning, Pass-IT estimates roughly 50–120 hours. Relevant experience may put you toward the lower end; starting from scratch may put you toward the higher end. Your needs may fall outside this range. This is not a time requirement from HashiCorp or a promise that you will be exam-ready within that time.

Do you need the Terraform Associate before the Advanced exam?

HashiCorp strongly recommends it but does not require it. Beyond that the assumed background is broad: Linux skills, YAML, JSON, HCL and CSV, networking fundamentals, and extensive production experience with a cloud provider. The catalog budget of 80 hours assumes all of that is already in place.

Using Pass-IT

What language are Pass-IT questions in?

Questions in the app are currently in English. Translations of the sample questions on this page apply only to this preview. Check with HashiCorp for the languages available for the official exam.

How long does my HC-TFP access last?

Access covers this certification for 12 months. You pay once, with no automatic renewal.

When does the money-back guarantee apply?

The guarantee refunds the Pass-IT purchase price for this certification. You need eligible paid access and a Readiness Score of at least 80% from your practice results when you take the exam. This score can only reach 80% after at least 50 answered questions and is not a validated probability of passing. Take the exam during your access period and submit official proof of failing within 14 days. Guarantee terms

About the HC-TFP exam

Where can I take the HC-TFP exam?

Online proctored via Certiverse.

How long is the Terraform Advanced exam?

Four hours. HashiCorp does not publish a fixed question count for it, which is why our page shows a time limit but no number of questions. The length is the point: it is a long exam built around configuration work rather than recall.

How do you renew the Terraform Advanced certification?

By passing the Advanced exam again before the two-year mark. There is no continuing-education alternative and no higher HashiCorp Terraform exam to renew it for you.

What happens if you fail the Terraform Advanced exam?

One retake is included with the registration, which is unusual and worth knowing before you book. It removes the second-attempt hesitation that stops people sitting a four-hour exam they are unsure about.

Your preparation for HC-TFP

$29.99one-time

12 months of access for HC-TFP · No automatic renewal

Buy HC-TFP access

Questions in the app are currently in English.

Try 20 questions for freeFree account required. No credit card.

Already have an account? Log in

Prefer a subscription? View subscriptions →

Money back if you fail with at least 80% Readiness, for eligible purchases under the guarantee terms.

Guarantee terms

The guarantee refunds the Pass-IT purchase price for this certification. You need eligible paid access and a Readiness Score of at least 80% from your practice results when you take the exam. This score can only reach 80% after at least 50 answered questions and is not a validated probability of passing. Take the exam during your access period and submit official proof of failing within 14 days.

Full guarantee terms →

Related certifications

HashiCorp Certified: Terraform Associate (004)HashiCorp Certified: Vault Associate (003)HashiCorp Certified: Vault Operations AdvancedAll HashiCorp certifications →