Examkin

Question

Difficulty: MediumResource Locks

To protect a critical production storage account, a `CanNotDelete` lock is configured directly on the storage resource. An IT technician can still rotate the storage account's access keys without removing the lock.

Answer: Answer

Answer

True
A CanNotDelete lock restricts users from deleting the resource, but allows reading and modifying the resource. Since rotating access keys is a modification operation, it is fully permitted under a CanNotDelete lock.

Step-by-Step Solution

1
Analyze the lock type applied to the resource.
The resource has a CanNotDelete lock applied.
Understanding the restriction type is critical to determining which operations are blocked.
2
Determine the operations blocked by a CanNotDelete lock.
A CanNotDelete lock prevents deletion but allows reading and modifying resource configurations.
This distinguishes it from a ReadOnly lock, which prevents both deletions and modifications.
3
Evaluate whether rotating storage account keys is a modification or deletion action.
Rotating keys modifies the configuration of the storage account and is not a deletion operation.
Since it is a modification, it is allowed under a CanNotDelete lock.

Key Concept

Azure Resource Locks prevent accidental deletion or modification of resources. A CanNotDelete lock prevents deletion but allows modification, while a ReadOnly lock prevents both deletion and modification.
Estimated Time:45s
Rate this question

Topics

Resource Locks

More questions from this topic