Examkin

Question

Difficulty: EasyResource Locks

A resource group named rg-analytics contains a virtual machine named VM1. An administrator applies a ReadOnly resource lock to rg-analytics. Which two operations on VM1 are blocked due to the inherited lock? Select two.

  1. Deleting VM1Answer
  2. Modifying the configuration settings of VM1Answer
  3. C
    Viewing the properties of VM1 in the Azure portal
  4. D
    Reading the activity logs of VM1

Answer

Deleting VM1 and modifying the configuration settings of VM1 are blocked by the inherited ReadOnly lock.
A ReadOnly resource lock applied to a resource group is inherited by all resources within it. This lock prevents users from deleting the resource and from modifying its configuration settings.

Step-by-Step Solution

1
Determine the type and inheritance of the applied lock.
A ReadOnly lock is applied at the resource group level (rg-analytics), which means all resources inside the resource group, including VM1, inherit this ReadOnly lock.
Azure resource locks are transitive and inherited by all child resources within the locked scope.
2
Identify the permissions restricted by a ReadOnly lock.
A ReadOnly lock prevents users from deleting or modifying the resource, while still allowing them to read its configuration.
This is the system behavior defined by Azure for ReadOnly locks.
3
Evaluate the operations against the lock restrictions.
Deleting VM1 and modifying its configuration are blocked. Viewing properties and reading activity logs are read-only actions and are allowed.
To select the correct options that represent blocked operations.

Key Concept

Azure Resource Locks restrict operations on resources, and their effects (such as preventing deletion and modification under a ReadOnly lock) are inherited from parent scopes like resource groups to child resources.
Rate this question

Topics

Resource Locks

More questions from this topic