Examkin

Question

Difficulty: MediumResource Locks

An administrator applies a ReadOnly resource lock to an Azure subscription. A database administrator with Owner permissions at the resource group level attempts to scale up an Azure SQL Database located in a resource group within that subscription. Which of the following describes the outcome of this action?

  1. A
    The operation succeeds because the database administrator has Owner permissions at the resource group level, which override the inherited lock.
  2. The operation is blocked because the database inherits the ReadOnly lock from the subscription level, which prevents modifying resource configurations.Answer
  3. C
    The operation succeeds because the ReadOnly lock only prevents the deletion of resources, not configuration changes.
  4. D
    The operation succeeds because resource locks applied at the subscription level do not inherit down to individual resources.

Answer

The operation is blocked because the database inherits the ReadOnly lock from the subscription level, which prevents modifying resource configurations.
The correct option is that the operation is blocked because the database inherits the ReadOnly lock from the subscription level. In Azure, resource locks applied at a parent scope (like a subscription) are inherited by all child resources. Furthermore, a ReadOnly lock prevents any modification to resource configurations, including scaling operations.

Step-by-Step Solution

1
Identify the scope and inheritance of the resource lock.
The ReadOnly lock is applied at the subscription level, which means all resource groups and resources within that subscription inherit this lock.
Azure resource locks are inherited by child resources from parent scopes.
2
Determine the restriction level of a ReadOnly lock.
A ReadOnly lock prevents all write and delete operations, meaning no configurations can be modified and no resources can be deleted.
A ReadOnly lock is more restrictive than a CanNotDelete lock, which only blocks deletion but allows updates.
3
Evaluate the interaction between RBAC roles (Owner) and resource locks.
The Owner role's permissions are restricted by the resource lock. The lock must be removed before any modification can occur.
Resource locks apply to all users, even those with administrative or owner privileges.

Key Concept

Resource Locks Inheritance and ReadOnly Restrictions
Rate this question

Topics

Resource Locks

More questions from this topic