Soru

Zorluk: KolayResource Governance: Resource Groups, Tags, and Resource Locks

An Azure subscription contains a resource group with the following configurations:

Resource Group NameTagResource Lock
RG-ServicesCostCenter: 4002ReadOnly

You deploy a new Azure Storage account named storebilling inside RG-Services.

You need to perform the following tasks:
- View the configuration properties of storebilling.
- Add a new tag with the key-value pair Project: Audit directly to storebilling.

Which of the following describes the outcome of these tasks?

  1. You can view the storage account properties, but you cannot add the Project: Audit tag. The CostCenter: 4002 tag is not inherited by the storage account.Cevap
  2. B
    You can view the storage account properties and successfully add the Project: Audit tag. The CostCenter: 4002 tag is automatically inherited by the storage account.
  3. C
    You cannot view the storage account properties and cannot add the Project: Audit tag. The CostCenter: 4002 tag is not inherited by the storage account.
  4. D
    You can view the storage account properties, but you cannot add the Project: Audit tag because the inherited CostCenter: 4002 tag prevents additional tags from being added.

Cevap

You can view the storage account properties, but you cannot add the Project: Audit tag. The CostCenter: 4002 tag is not inherited by the storage account.
The correct option correctly states that viewing the properties is successful because ReadOnly locks allow GET requests. It also correctly states that you cannot add the tag because adding tags is a write operation blocked by the inherited ReadOnly lock. Finally, it correctly reflects that tags applied to a resource group are not inherited by resources.

Adım Adım Çözüm

1
Determine the impact of the ReadOnly lock on viewing properties.
Viewing properties is allowed.
ReadOnly resource locks allow read-only operations (GET requests) to succeed on the resource.
2
Determine the impact of the ReadOnly lock on adding a tag.
Adding the tag is blocked.
A ReadOnly lock prevents any create, update, or delete operations (PUT, POST, DELETE requests). Adding a tag is a write operation and is therefore blocked.
3
Evaluate tag inheritance from the resource group to the storage account.
The storage account does not inherit the CostCenter: 4002 tag.
In Azure, tags applied at the resource group level do not automatically inherit to resources inside that resource group.

Anahtar Kavram

Azure resource locks (specifically ReadOnly locks) are inherited by child resources and prevent write operations while allowing read operations. Azure tags are not inherited from resource groups to child resources.
Bu soruyu puanla