An administrator manages an Azure subscription that includes a resource group named rg-ecommerce-prod. The resource group contains an Azure Container Registry named acrprodregistry and an Azure Key Vault named kvecommerceprod. The administrator applies a tag named 'CostCenter: Finance' and a CanNotDelete resource lock to rg-ecommerce-prod. Additionally, the administrator applies a ReadOnly resource lock directly to kvecommerceprod. The administrator attempts to delete acrprodregistry, add a new secret to kvecommerceprod, and query the container registry's cost by filtering for the 'CostCenter: Finance' tag. Which of the following describes the outcomes of these actions?
- The deletion of the container registry is blocked, adding the secret to the key vault is blocked, and the container registry does not have the CostCenter tag applied.Cevap
- BThe deletion of the container registry succeeds, adding the secret to the key vault is blocked, and the container registry does not have the CostCenter tag applied.
- CThe deletion of the container registry is blocked, adding the secret to the key vault succeeds, and the container registry automatically inherits the CostCenter tag.
- DThe deletion of the container registry is blocked, adding the secret to the key vault is blocked, and the container registry automatically inherits the CostCenter tag.
Cevap
The deletion of the container registry is blocked, adding the secret to the key vault is blocked, and the container registry does not have the CostCenter tag applied.
The correct option correctly identifies that the CanNotDelete lock is inherited by the container registry, blocking its deletion; the ReadOnly lock on the key vault prevents adding new secrets; and tags applied to the resource group are not automatically inherited by individual resources, meaning the container registry will not match the tag query.
Adım Adım Çözüm
Anahtar Kavram
Resource lock inheritance and tag non-inheritance rules in Azure resource governance.