nerdexam
HashiCorpHashiCorp

TERRAFORM-ASSOCIATE-004 · Question #109

TERRAFORM-ASSOCIATE-004 Question #109: Real Exam Question with Answer & Explanation

The correct answer is C: Before the apply phase. In a Terraform Cloud run workflow, the sequence is: plan → Sentinel policy check → apply. Sentinel policies are evaluated after the plan phase produces a plan output, but before the apply phase begins. This placement is intentional - it allows Sentinel to inspect the planned chan

Submitted by katya_ua· Apr 18, 2026Understand Terraform Cloud and Enterprise Capabilities

Question

When does Sentinel enforce policy logic during a Terraform Cloud run?

Options

  • ABefore the plan phase
  • BDuring the plan phase
  • CBefore the apply phase
  • DAfter the apply phase

Explanation

In a Terraform Cloud run workflow, the sequence is: plan → Sentinel policy check → apply. Sentinel policies are evaluated after the plan phase produces a plan output, but before the apply phase begins. This placement is intentional - it allows Sentinel to inspect the planned changes and either pass, warn, or hard-fail before any real infrastructure is modified. Choosing 'before the apply phase' correctly identifies this checkpoint in the workflow.

Topics

#Sentinel#Terraform Cloud#Policy as Code#Run Workflow

Community Discussion

No community discussion yet for this question.

Full TERRAFORM-ASSOCIATE-004 PracticeBrowse All TERRAFORM-ASSOCIATE-004 Questions