Examkin

Question

Difficulty: MediumResource Governance: Resource Groups, Tags, and Resource Locks

An administrator manages an Azure subscription. The administrator applies a tag named `CostCenter: Operations` and a `CanNotDelete` lock to a resource group named `rg-ops-prod`. The resource group contains an Azure Virtual Machine named `vm-ops-web`.

Consider the following statement: 'Because the tag and lock are applied at the resource group level, `vm-ops-web` inherits the `CanNotDelete` lock—preventing its deletion—but does not inherit the `CostCenter: Operations` tag.'

Is this statement true or false?

Answer: Answer

Answer

True
The statement is correct because resource locks in Azure are inherited from parent scopes to child resources, while tags are not inherited automatically.

Step-by-Step Solution

1
Evaluate lock inheritance for the virtual machine.
Locks applied at the resource group scope are inherited by all child resources. The virtual machine inherits the CanNotDelete lock.
To verify if the VM is protected from deletion by the resource group's lock.
2
Evaluate tag inheritance for the virtual machine.
Tags applied to a resource group do not inherit down to individual resources.
To determine if the VM automatically receives the tag applied to the resource group.
3
Assess the truth value of the combined statement.
Since the VM inherits the lock but does not inherit the tag, the statement is true.
To formulate the final answer based on the evaluated outcomes.

Key Concept

Azure resource locks are inherited by child resources from their parent scopes, whereas Azure tags applied to resource groups are not inherited by individual resources within those groups.
Rate this question

Topics

Resource Governance: Resource Groups, Tags, and Resource Locks

More questions from this topic