If you want to replace a VM created by Terraform with an identical one without affecting a database, which approach is best?

• A. terraform state rm command to remove the VM from state file
• B. Use the terraform taint command targeting the VMs then run terraform plan and terraform apply
• C. Use the terraform apply command targeting the VM resources only
• D. Delete the Terraform VM resources from your Terraform code then run terraform plan and terraform apply

Answer: (B)

Marking a resource as tainted signals Terraform to recreate that resource on the next apply. By tainting the VM, you tell Terraform that the existing instance is unhealthy and must be replaced. The ensuing plan will show a destroy and recreate for that VM, while leaving the database resource untouched because it’s a separate resource with its own lifecycle. When you apply, Terraform performs only the VM replacement, producing an identical new VM and preserving the database intact. This approach is the safe and direct way to replace a single resource without disturbing other infrastructure.