An Azure subscription contains a resource group named RG-Gov. A tag with the key-value pair Dept: Finance is applied to RG-Gov, and a ReadOnly lock is placed on the RG-Gov scope. Within RG-Gov, you deploy an Azure Storage account named store1 with no direct locks or tags.
An administrator asserts that if they query resources using the Dept: Finance tag, store1 will be included in the query results, and that they can rotate the access keys of store1 without removing the lock from RG-Gov.
Is the administrator's assertion correct?
Cevap: Cevap
Cevap
The administrator's assertion is incorrect.
The correct answer is False because tags are not inherited from resource groups to child resources, and the inherited ReadOnly lock prevents key listing and rotation operations on the storage account.
Adım Adım Çözüm
Anahtar Kavram
Tags are not inherited from resource groups to child resources. Resource locks are inherited by child resources, and ReadOnly locks prevent control plane POST operations such as listing or rotating access keys.