HashiCorp Terraform Authoring and Operations Professional
255 practice questions
Last reviewed: April 2026
Personal notes and resource links for your study journey
Filter by Certification
The HashiCorp Terraform Authoring and Operations Professional is the advanced, lab-based credential for engineers who write Terraform configuration and operate infrastructure with it day to day. Unlike the multiple-choice Associate exam, the Professional is hands-on: you work in a pre-provisioned Linux environment, modifying configuration and provisioning real infrastructure, and grading validates your HCL syntax, your state files, and the actual settings on the resources you create. It targets practitioners with production experience authoring dynamic HCL, designing and versioning modules, performing state surgery, and running scalable, collaborative workflows on HCP Terraform — the tier above "can read HCL and run apply."
The heaviest authoring domain. Expect to write dynamic blocks, use complex/structural types (objects with optional() attributes and defaults), drive resources with for_each and for expressions over maps of objects, and apply meta-arguments — lifecycle precondition/postcondition, replace_triggered_by, create_before_destroy — correctly. Functions (try, can, templatefile, flatten, setproduct), provider aliasing, and variable validation all show up. You are graded on configuration that actually plans and applies, not on recognizing the right multiple-choice answer.
Module design and lifecycle over time: input/output scoping, version constraints and pinning, sourcing from the registry/Git/local paths, composing and nesting modules, iterating modules with for_each, and passing (aliased) providers into child modules. The exam emphasizes refactoring — using moved blocks to restructure resources and modules without destroying infrastructure, and evolving a module across versions without breaking callers.
State surgery and CLI fluency: terraform state mv/rm/list/show, config-driven import { } blocks (and -generate-config-out), backend configuration and migration between local/remote/S3/HCP, state locking and force-unlock, -refresh-only, -replace, careful use of -target, and safely refactoring resource addresses. You must reason about how Terraform creates and updates state and recover from real-world drift and partial failures.
Operating Terraform collaboratively on HCP Terraform: workspace and project organization, variable sets and precedence, dynamic provider credentials (OIDC to AWS/Azure/GCP, Vault-backed), team access and permission scoping, policy-as-code with Sentinel/OPA and enforcement levels, run tasks, VCS- vs CLI- vs API-driven runs, run triggers, the private module registry, and no-code modules. The professional-level questions assume you have administered an organization, not just consumed a workspace.
$130k–$175k–$245k USD annual
Range covers senior/staff US-based platform, SRE, and IaC-lead roles where advanced Terraform is a core expectation. The Professional cert signals production-grade authoring + operations depth beyond the Associate baseline; at FAANG / unicorn platform orgs total compensation commonly exceeds the high end ($280k-$400k+ TC). As with all certs, it complements demonstrated experience operating Terraform at scale rather than replacing it.
Source: levels.fyi 2025-2026 senior DevOps / platform data, U.S. BLS OEWS May 2024, Glassdoor 2025-2026. Figures are approximate; actual compensation depends on role, region, and experience.
Terraform is the dominant infrastructure-as-code tool, and the Professional credential is positioned for the senior end of that market — teams standardizing multi-cloud governance on HCP Terraform, building reusable internal module registries, and enforcing policy-as-code. Where the Associate filters for IaC fluency, the Professional signals that a candidate can author dynamic modules, perform state surgery without downtime, and run an HCP Terraform organization with dynamic credentials, policy sets, and team scoping. Demand has intensified since the IBM acquisition closed in February 2025 as enterprises consolidate IaC platforms. The credential is most valuable paired with a portfolio of published modules and real operations experience; the hands-on exam format itself makes it harder to earn without genuine practice.
HashiCorp recommends holding (or being ready to hold) the Terraform Associate and having extensive production experience — roughly a year or more of daily Terraform authoring and operations. There are no enforced prerequisites, but the hands-on format punishes candidates who have only studied conceptually.
You should be comfortable writing dynamic HCL from scratch, designing and versioning modules consumed by other teams, performing state migrations and surgery on real backends, and administering an HCP Terraform organization (workspaces, variable sets, dynamic credentials, policy sets, team permissions). Familiarity with at least one major cloud provider is assumed, since the exam provisions and grades real infrastructure.
The Professional is substantially harder than the Associate, primarily because of its format: it is a lab-based, hands-on exam delivered in a pre-provisioned Linux environment over roughly four hours (including a short break). Scenarios ask you to modify configuration and provision/manage actual infrastructure; grading validates your configuration syntax, your state files, and the real settings on the resources you create — there is nowhere to hide behind multiple-choice elimination.
Common stumbling blocks: authoring correct dynamic blocks and complex-type plumbing under time pressure, refactoring with moved blocks without triggering destroys, state surgery (mv/rm/import, backend migration) on a live workspace, and configuring HCP Terraform operations (dynamic credentials, policy enforcement levels, team scoping). Plan on significant hands-on preparation — building modules, breaking and fixing state, and running real HCP Terraform workspaces — rather than reading alone. CertLabPro practice questions reinforce the underlying concepts; pair them with the hands-on lab and real provisioning practice.
HashiCorp Terraform Authoring and Operations Professional. Lab-based, hands-on exam (Terraform 1.6+ and HCP Terraform) covering HCL & configuration, modules, CLI & state management, and HCP Terraform operations. ~4 hours, $295 USD with one free retake, 2-year validity. Passing also extends an active Terraform Associate credential.
TF-PRO (HashiCorp Terraform Authoring and Operations Professional) is a a challenging, scenario-heavy exam that requires deep hands-on experience and the ability to make architectural trade-off decisions Professional-level exam. Most candidates need 150–300 hours of study spread over 3–6 months for professional and expert-level exams. These exams typically expect prior associate-level proficiency. Most candidates who score consistently above the passing threshold on practice exams pass on their first attempt.
Most candidates need 150–300 hours of study spread over 3–6 months for professional and expert-level exams. These exams typically expect prior associate-level proficiency. Time-to-pass varies widely by prior experience. Engineers with hands-on production experience in the underlying technology typically need less; candidates new to the platform should plan toward the upper end of that range.
TF-PRO is a recognized credential in the HashiCorp ecosystem and signals validated knowledge to employers, recruiters, and clients. Whether it is worth the time and fee for you depends on your role and goals — it tends to pay off most for cloud engineers, architects, and consultants who work with HashiCorp day-to-day or want to move into roles that do.
The passing score for TF-PRO is 700 / 1000. The exam contains 60 questions and lasts 1 hr 30 min.
The TF-PRO exam fee is $70.50 USD. Fees are set by HashiCorp and may vary by region; always confirm the current price on the official HashiCorp certification page before booking.
HashiCorp Terraform Associate is valid for 2 years. You can re-take starting 6 months before expiration; passing extends the credential by 2 years from the new pass date.
Yes, HashiCorp certifications are delivered online only — there are no in-person test centers. The exam runs in a secure proctored browser; you'll need a quiet private room, webcam, microphone, stable broadband, and a government photo ID.
CertLabPro provides 15 study modes across the practice question bank for TF-PRO. The exam-simulation mode mirrors the real exam: 60 questions in 1 hr 30 min, with the same passing threshold of 700 / 1000. Browse mode lets you read every Q&A statically.