Match the tool to the lifecycle. Use a declarative provisioning tool like Terraform for creating and destroying cloud resources with a state model. Use configuration management for what happens inside a machine when you cannot use immutable images. Use cloud native tooling when you need tight integration or your organization is entirely on one provider. The bigger factor is usually team familiarity and having one obvious way to do things.
Why interviewers ask this
The interviewer is checking that you choose tools on merit and context instead of preference. They want to hear the provisioning versus configuration distinction, an honest view of the multi cloud argument, which is often overstated, and recognition that consistency across a team is worth more than a marginally better tool. Strong answers mention the cost of running two tools for the same job.
How to structure your answer
- Split the problem space: provisioning versus in machine configuration.
- Give the case for each tool honestly, including lock in.
- Weigh team familiarity and existing standards.
- Warn against running two overlapping tools for the same job.
Example answer
I split it by lifecycle. Provisioning cloud resources, so networks, clusters, databases, is declarative with a state model, and Terraform is my default there because the provider coverage is broad and the plan step gives me a genuine review artifact before anything changes. Configuration inside a machine is a different job, and honestly I try to avoid needing it at all by baking images and treating instances as disposable, so configuration management ends up limited to image building or legacy boxes I cannot replace yet. Cloud native tooling is a real option when an organization is entirely on one provider and values the tight integration, and the multi cloud portability argument for Terraform is weaker than people claim, because the modules are provider specific anyway. What decides it more often than technical merit is what the team already knows and what the existing code is written in. Introducing a second provisioning tool for the same resources is the actual mistake, because now drift can come from either direction and nobody knows which one is authoritative.
Walking into this interview soon? GhostPilot listens to your live call, spots the question the moment it is asked, and puts a structured answer on your screen in real time. Try it on your next mock, or grab a $29 Session Pass, no subscription, for the real thing.
See how it worksFollow-up questions to expect
- When would you accept the lock in of a provider specific tool?
- How would you migrate from one provisioning tool to another safely?
- How do you keep module standards consistent across many teams?
Related devops engineer questions
Your interviewer will ask their own version of this. Paste your actual job description into the free Question Predictor and get the 20 questions that role is most likely to ask, with what each one is really probing.
Predict my questions