Examkin

Question

Difficulty: EasyResource Governance: Resource Groups, Tags, and Resource Locks

An Azure subscription contains a resource group with the following configurations:

Resource Group NameTagResource Lock
RG-ServicesCostCenter: 4002ReadOnly

You deploy a new Azure Storage account named storebilling inside RG-Services.

You need to perform the following tasks:
- View the configuration properties of storebilling.
- Add a new tag with the key-value pair Project: Audit directly to storebilling.

Which of the following describes the outcome of these tasks?

  1. You can view the storage account properties, but you cannot add the Project: Audit tag. The CostCenter: 4002 tag is not inherited by the storage account.Answer
  2. B
    You can view the storage account properties and successfully add the Project: Audit tag. The CostCenter: 4002 tag is automatically inherited by the storage account.
  3. C
    You cannot view the storage account properties and cannot add the Project: Audit tag. The CostCenter: 4002 tag is not inherited by the storage account.
  4. D
    You can view the storage account properties, but you cannot add the Project: Audit tag because the inherited CostCenter: 4002 tag prevents additional tags from being added.

Answer

You can view the storage account properties, but you cannot add the Project: Audit tag. The CostCenter: 4002 tag is not inherited by the storage account.
The correct option correctly states that viewing the properties is successful because ReadOnly locks allow GET requests. It also correctly states that you cannot add the tag because adding tags is a write operation blocked by the inherited ReadOnly lock. Finally, it correctly reflects that tags applied to a resource group are not inherited by resources.

Step-by-Step Solution

1
Determine the impact of the ReadOnly lock on viewing properties.
Viewing properties is allowed.
ReadOnly resource locks allow read-only operations (GET requests) to succeed on the resource.
2
Determine the impact of the ReadOnly lock on adding a tag.
Adding the tag is blocked.
A ReadOnly lock prevents any create, update, or delete operations (PUT, POST, DELETE requests). Adding a tag is a write operation and is therefore blocked.
3
Evaluate tag inheritance from the resource group to the storage account.
The storage account does not inherit the CostCenter: 4002 tag.
In Azure, tags applied at the resource group level do not automatically inherit to resources inside that resource group.

Key Concept

Azure resource locks (specifically ReadOnly locks) are inherited by child resources and prevent write operations while allowing read operations. Azure tags are not inherited from resource groups to child resources.
Rate this question

Topics

Resource Governance: Resource Groups, Tags, and Resource Locks

More questions from this topic