Examkin

Question

Difficulty: EasyResource Locks

An Azure administrator needs to prevent users from accidentally deleting a virtual machine named VM-Prod. However, users must still be able to start, stop, and resize the virtual machine. Which configuration should the administrator apply to VM-Prod?

  1. A CanNotDelete resource lockAnswer
  2. B
    A ReadOnly resource lock
  3. C
    An Azure Policy with a Deny effect
  4. D
    An Azure Policy that retroactively removes permissions

Answer

A CanNotDelete resource lock
The configuration utilizing a CanNotDelete resource lock is correct because it prevents users from deleting the virtual machine while still permitting them to modify its state (such as starting, stopping, or resizing).

Step-by-Step Solution

1
Identify the goal of the configuration, which is to block the deletion of the virtual machine while allowing modifications like starting, stopping, and resizing.
The requirement matches the behavior of the CanNotDelete resource lock.
Azure resource locks provide a way to restrict actions on resources. Specifically, CanNotDelete allows modifications but prevents deletion.
2
Evaluate the ReadOnly resource lock alternative.
The ReadOnly lock is ruled out because it blocks both deletion and modifications (including starting and stopping the VM).
ReadOnly prevents any updates to the resource, which violates the requirement to allow users to change its size or status.

Key Concept

Azure Resource Locks prevent accidental deletion or modification of critical Azure resources.
Rate this question

Topics

Resource Locks

More questions from this topic