DevOps Engineer Interview Question

How do you decide between Terraform, a configuration management tool, and a cloud native option for a given job?

What the interviewer is probing, how to structure your answer, and a spoken example you can adapt.

Quick answer

Match the tool to the lifecycle. Use a declarative provisioning tool like Terraform for creating and destroying cloud resources with a state model. Use configuration management for what happens inside a machine when you cannot use immutable images. Use cloud native tooling when you need tight integration or your organization is entirely on one provider. The bigger factor is usually team familiarity and having one obvious way to do things.

Why interviewers ask this

The interviewer is checking that you choose tools on merit and context instead of preference. They want to hear the provisioning versus configuration distinction, an honest view of the multi cloud argument, which is often overstated, and recognition that consistency across a team is worth more than a marginally better tool. Strong answers mention the cost of running two tools for the same job.

How to structure your answer

  • Split the problem space: provisioning versus in machine configuration.
  • Give the case for each tool honestly, including lock in.
  • Weigh team familiarity and existing standards.
  • Warn against running two overlapping tools for the same job.

Example answer

Spoken example, first person

I split it by lifecycle. Provisioning cloud resources, so networks, clusters, databases, is declarative with a state model, and Terraform is my default there because the provider coverage is broad and the plan step gives me a genuine review artifact before anything changes. Configuration inside a machine is a different job, and honestly I try to avoid needing it at all by baking images and treating instances as disposable, so configuration management ends up limited to image building or legacy boxes I cannot replace yet. Cloud native tooling is a real option when an organization is entirely on one provider and values the tight integration, and the multi cloud portability argument for Terraform is weaker than people claim, because the modules are provider specific anyway. What decides it more often than technical merit is what the team already knows and what the existing code is written in. Introducing a second provisioning tool for the same resources is the actual mistake, because now drift can come from either direction and nobody knows which one is authoritative.

Walking into this interview soon? GhostPilot listens to your live call, spots the question the moment it is asked, and puts a structured answer on your screen in real time. Try it on your next mock, or grab a $29 Session Pass, no subscription, for the real thing.

See how it works

Follow-up questions to expect

  • When would you accept the lock in of a provider specific tool?
  • How would you migrate from one provisioning tool to another safely?
  • How do you keep module standards consistent across many teams?

Related devops engineer questions

Your interviewer will ask their own version of this. Paste your actual job description into the free Question Predictor and get the 20 questions that role is most likely to ask, with what each one is really probing.

Predict my questions

Rehearse the hard questions before they are asked

Practise with a live copilot, then walk in ready. A $29 Session Pass gets you through the interview with no subscription and no lock-in.

Get GhostPilot