A practitioner runs 'terraform plan' against a configuration that would add two resources and delete one. Before the command finishes, they cancel a meeting because they worry the plan has already begun deleting the resource. A colleague reassures them. Which statement correctly describes what running 'terraform plan' on its own has done to the real infrastructure?
$ terraform plan
Plan: 2 to add, 0 to change, 1 to destroy.- AIt has made no changes; plan only previews the actions it would take and leaves the real infrastructure untouched. Correct
- BIt has already deleted the one resource marked for destroy, because destroys are executed during the plan phase for safety.
- CIt has created the two new resources but deferred the destroy until an apply is run.
- DIt has applied every change immediately because no '-out' file was supplied to hold the proposal.
Why A is correct: Correct: 'terraform plan' compares the configuration and refreshed state to build a proposed set of actions, but it never creates, updates, or destroys real resources.
Why B is wrong: Tempting because the summary lists a destroy, but plan only reports intended actions; nothing is destroyed until 'terraform apply' runs.
Why C is wrong: Plausible if you assume additions are low risk, but plan creates nothing; all actions, additions included, wait for apply.
Why D is wrong: The absence of '-out' only means the proposal is not saved to disk; it does not cause plan to apply anything, which plan never does.