An administrator manages an Azure subscription. A resource group named `rg-analytics-prod` has a tag named `CostCenter: Finance` and a `ReadOnly` resource lock. Inside `rg-analytics-prod`, there is an Azure Storage account named `sa-analytics`.
The administrator needs to perform the following actions:
1. Verify the tags currently applied to the `sa-analytics` storage account.
2. Modify the configuration of `sa-analytics` to enable public network access.
Which of the following describes the outcome of these actions?
- The storage account does not inherit the tag, and the configuration modification is blocked.Answer
- BThe storage account automatically inherits the tag, and the configuration modification is blocked.
- CThe storage account does not inherit the tag, and the configuration modification succeeds.
- DThe storage account automatically inherits the tag, and the configuration modification succeeds.
Answer
The storage account does not inherit the tag, and the configuration modification is blocked.
The correct answer is correct because Azure tags applied to a resource group are not inherited by resources within that group. Meanwhile, resource locks are inherited by all child resources, and a ReadOnly lock blocks write and update operations, including changing the configuration of a storage account.
Step-by-Step Solution
Key Concept
Resource lock and tag inheritance behavior in Azure Resource Manager
Estimated Time:1m 15s