Examkin

Question

Difficulty: MediumResource Locks

An Azure administrator manages a subscription containing a resource group named `rg-data-pipeline`. The administrator applies a `ReadOnly` resource lock to `rg-data-pipeline`. Within this resource group, there is a stopped Azure Virtual Machine named `vm-processor`. Is the statement 'A user with the Owner role can successfully start the `vm-processor` virtual machine while the `ReadOnly` lock is active' true or false?

Answer: Answer

Answer

False
The statement is false because a ReadOnly lock prevents starting, stopping, or restarting a virtual machine, and this restriction applies to all users including Owners.

Step-by-Step Solution

1
Analyze the type of resource lock applied.
A ReadOnly lock is applied at the resource group level (`rg-data-pipeline`).
Resource locks are inherited by child resources, meaning the virtual machine (`vm-processor`) inherits the ReadOnly lock.
2
Determine the impact of a ReadOnly lock on control plane operations.
ReadOnly locks block all modification operations (PUT/DELETE) and POST operations like starting or stopping virtual machines.
This prevents configuration or state changes to the resource.
3
Evaluate the role permission and lock override rules.
The Owner role has full access but is still restricted by the resource lock.
Resource locks apply to all users, including Owners and Administrators, and cannot be bypassed unless the lock is deleted.

Key Concept

Resource lock inheritance and operational limits
Estimated Time:1m 0s
Rate this question

Topics

Resource Locks

More questions from this topic