Examkin

Soru

Zorluk: ZorResource Locks

If a ReadOnly resource lock is applied to an Azure resource group, administrators are still permitted to start, stop, or restart any virtual machines within that resource group.

Cevap: Cevap

Cevap

The statement is false. A ReadOnly lock applied at the resource group level blocks control-plane POST operations, which prevents administrators from starting, stopping, or restarting any virtual machines in that group.
Applying a ReadOnly lock to a resource group blocks all delete and write actions, including POST requests, on all inherited resources. Since starting, stopping, and restarting virtual machines are executed via POST requests in the Azure Resource Manager control plane, these actions are blocked.

Adım Adım Çözüm

1
Determine the resource lock type and its target scope.
A ReadOnly lock is applied at the resource group level.
This establishes the scope and policy context for all resources inside the group.
2
Apply the lock inheritance rules to the child resources.
The ReadOnly lock is inherited by all virtual machines within the resource group.
Azure resource locks propagate down to all nested resources within the locked parent container.
3
Classify the virtual machine power operations (start, stop, and restart).
These operations represent POST actions directed to the Azure Resource Manager control plane.
A ReadOnly lock blocks all write and POST requests at the control plane level, thereby blocking these power actions.

Anahtar Kavram

ReadOnly Lock Scope Restrictions on Control Plane POST Operations
Bu soruyu puanla

Konular

Resource Locks

Bu konudan daha fazla soru