Examkin

Question

Difficulty: EasyResource Locks

An Azure administrator applies a ReadOnly resource lock to an Azure resource group. Which of the following describes the effect of this lock on the resources inside the resource group?

  1. A
    Authorized users can modify and update the resources, but they are prevented from deleting them.
  2. B
    The lock prevents all users from viewing the resources unless they are assigned the Owner role via Azure Role-Based Access Control (RBAC).
  3. Authorized users can read the resource configurations, but they cannot modify or delete the resources.Answer
  4. D
    The lock will retroactively modify the configurations of the resources to make them compliant with Azure Policy.

Answer

Authorized users can read the resource configurations, but they cannot modify or delete the resources.
Applying a ReadOnly lock to a resource group prevents any changes to the configurations of the resources within that group, and also prevents the resources from being deleted. Authorized users can still read and view the resource settings.

Step-by-Step Solution

1
Identify the type of resource lock applied.
The lock is a ReadOnly lock applied at the resource group level.
Understanding the lock type is necessary to determine the specific restrictions enforced.
2
Analyze how locks are inherited.
The lock is inherited by all resources within the resource group.
Azure resource locks applied at a parent scope (like a resource group) apply to all resources contained within that scope.
3
Determine the restrictions of a ReadOnly lock.
A ReadOnly lock prevents all delete and write/update operations.
This matches the definition of a ReadOnly lock, which is more restrictive than a CanNotDelete lock.

Key Concept

Azure Resource Locks (ReadOnly vs CanNotDelete)
Rate this question

Topics

Resource Locks

More questions from this topic