Terraform State Files & Locking Quiz

1. True or False: Remote state automatically encrypts sensitive data.

True

False

Encryption depends on backend configuration; you must enable it (e.g., S3 server-side encryption) separately.

Explanation

Encryption depends on backend configuration; you must enable it (e.g., S3 server-side encryption) separately.

2. What data does the state file NOT typically contain?

Resource IDs and attributes

Terraform version information

VCS commit history

Sensitive values like passwords

State files track infrastructure; VCS history is maintained separately by Git, not in Terraform state.

Explanation

State files track infrastructure; VCS history is maintained separately by Git, not in Terraform state.

3. True or False: Terraform automatically migrates state when you change backends.

True

False

When you reconfigure the backend, terraform init detects the change and migrates state automatically.

Explanation

When you reconfigure the backend, terraform init detects the change and migrates state automatically.

4. Which scenario is most likely to cause state lock timeouts?

Running terraform plan

A crashed or hung terraform apply holding the lock

Defining new variables

Updating provider versions

If a process crashes while holding a lock, the lock persists and blocks other operations until manually released.

Explanation

If a process crashes while holding a lock, the lock persists and blocks other operations until manually released.

5. State consistency in distributed teams is maintained by ____.

Remote storage and locking mechanisms ensure all team members work with the same state version.

Explanation

Remote storage and locking mechanisms ensure all team members work with the same state version.

Submit

6. What is the purpose of the backend configuration block?

To define input variables

To specify where and how state is stored

To set resource tags

To configure provider authentication

Backend blocks tell Terraform where to store state (remote or local) and configure locking behavior.

Explanation

Backend blocks tell Terraform where to store state (remote or local) and configure locking behavior.

7. True or False: State files contain only resource names and IDs.

True

False

State files store full resource attributes, including sensitive data like passwords, making encryption critical.

Explanation

State files store full resource attributes, including sensitive data like passwords, making encryption critical.

8. Which backend supports state locking natively without additional services?

Local backend

S3 with DynamoDB

Azure Blob Storage

Terraform Cloud

Terraform Cloud manages locking automatically; local and S3 require separate locking services.

Explanation

Terraform Cloud manages locking automatically; local and S3 require separate locking services.

9. State file drift refers to ____.

Drift occurs when real resources are modified manually or by other tools, causing state to become out of sync.

Explanation

Drift occurs when real resources are modified manually or by other tools, causing state to become out of sync.

Submit

10. What does the terraform refresh command do?

Applies all pending changes immediately

Updates state to match real infrastructure without modifying resources

Deletes all remote state

Locks the state file permanently

refresh reads actual resource attributes and updates state; it does not create or destroy resources.

Explanation

refresh reads actual resource attributes and updates state; it does not create or destroy resources.

11. What is the primary purpose of a Terraform state file?

To store the desired configuration code

To track the current state of deployed infrastructure

To define variables and input values

To manage user authentication and permissions

State files maintain a record of real infrastructure resources, enabling Terraform to compare desired vs. actual state.

Explanation

State files maintain a record of real infrastructure resources, enabling Terraform to compare desired vs. actual state.

12. Which command manually releases a Terraform state lock?

Terraform unlock

Terraform force-unlock

Terraform release-lock

Terraform state delete

force-unlock requires the lock ID and should only be used when a lock is stuck; use with caution.

Explanation

force-unlock requires the lock ID and should only be used when a lock is stuck; use with caution.

13. What is the purpose of terraform.tfstate.backup?

To store encrypted credentials

To backup the previous state before apply

To define backend configuration

To manage version control

The backup file preserves the prior state, enabling recovery if the current state becomes corrupted.

Explanation

The backup file preserves the prior state, enabling recovery if the current state becomes corrupted.

14. A DynamoDB table in AWS state locking provides ____.

DynamoDB enables atomic lock operations across distributed systems, preventing concurrent state modifications.

Explanation

DynamoDB enables atomic lock operations across distributed systems, preventing concurrent state modifications.

Submit

15. What is the terraform.tfstate file?

A configuration file defining resources

The default local state file storing current resource state

A temporary file deleted after each apply

A backup of the remote backend

terraform.tfstate is the default local state file; remote backends replace this for team environments.

Explanation

terraform.tfstate is the default local state file; remote backends replace this for team environments.

16. True or False: Terraform state files should be committed to version control.

True

False

State files contain sensitive data and should be stored remotely; committing them to Git is a security risk.

Explanation

State files contain sensitive data and should be stored remotely; committing them to Git is a security risk.

17. Which of these is NOT a common Terraform remote backend?

AWS S3 with DynamoDB

Azure Blob Storage

Google Cloud SQL

HashiCorp Consul

Google Cloud Storage (not SQL) is the standard GCP backend; SQL is a relational database, not a state backend.

Explanation

Google Cloud Storage (not SQL) is the standard GCP backend; SQL is a relational database, not a state backend.

18. State locking prevents ____.

Locks ensure only one Terraform operation modifies state at a time, avoiding corruption.

Explanation

Locks ensure only one Terraform operation modifies state at a time, avoiding corruption.

Submit

19. What happens during a Terraform plan operation?

Resources are immediately created or modified

State file is locked and cannot be accessed

Desired state is compared with current state to show changes

All remote state is deleted and reset

Plan compares the configuration against the state file to display what changes will occur before apply.

Explanation

Plan compares the configuration against the state file to display what changes will occur before apply.

20. Which backend storage option is recommended for multi-team environments?

Local state file

Remote backend with locking

Version control system

Environment variables

Remote backends with locking support concurrent access and prevent state corruption in collaborative settings.

Explanation

Remote backends with locking support concurrent access and prevent state corruption in collaborative settings.

AutoOps+ Terraform State Files and Locking Quiz

1. True or False: Remote state automatically encrypts sensitive data.

2.

What first name or nickname would you like us to use?

2. What data does the state file NOT typically contain?

3. True or False: Terraform automatically migrates state when you change backends.

4. Which scenario is most likely to cause state lock timeouts?

5. State consistency in distributed teams is maintained by ____.

6. What is the purpose of the backend configuration block?

7. True or False: State files contain only resource names and IDs.

8. Which backend supports state locking natively without additional services?

9. State file drift refers to ____.

10. What does the terraform refresh command do?

11. What is the primary purpose of a Terraform state file?

12. Which command manually releases a Terraform state lock?

13. What is the purpose of terraform.tfstate.backup?

14. A DynamoDB table in AWS state locking provides ____.

15. What is the terraform.tfstate file?

16. True or False: Terraform state files should be committed to version control.

17. Which of these is NOT a common Terraform remote backend?

18. State locking prevents ____.

19. What happens during a Terraform plan operation?

20. Which backend storage option is recommended for multi-team environments?