Soru

Zorluk: OrtaResource Locks

An Azure administrator applies a ReadOnly resource lock to a resource group named RG-Web. The resource group contains an Azure App Service plan named ASP-Web. An administrator who is assigned the Owner role at the subscription level attempts to scale up ASP-Web by increasing the instance size. Which of the following describes the outcome of this attempt?

  1. A
    The scaling operation succeeds because the Owner role at the subscription level has permissions that override resource locks.
  2. The scaling operation fails because the ReadOnly lock is inherited by the App Service plan and prevents configuration updates.Cevap
  3. C
    The scaling operation succeeds because a ReadOnly lock only prevents the deletion of resources, not configuration changes.
  4. D
    The scaling operation succeeds because resource locks applied at the resource group level do not inherit to individual resources.

Cevap

The scaling operation fails because the ReadOnly lock is inherited by the App Service plan and prevents configuration updates.
The scaling operation fails because the ReadOnly lock is inherited by the App Service plan and prevents configuration updates. Azure resource locks applied at the resource group level are inherited by all resources inside that resource group. A ReadOnly lock restricts all actions that write or modify the resource's configuration, which includes scaling operations. Resource locks apply to all users, meaning even an administrator with Owner permissions is blocked until the lock is removed.

Adım Adım Çözüm

1
Analyze the lock type and its target scope.
A ReadOnly lock is applied to the resource group RG-Web.
To determine what operations are restricted at the parent level.
2
Determine the lock inheritance rule for child resources.
The App Service plan ASP-Web inherits the ReadOnly lock from its resource group.
Resource locks in Azure are inherited by all child resources under the parent scope.
3
Evaluate the permissions of the ReadOnly lock against the scale-up action and the user's role.
The scale-up action is blocked, and the Owner role cannot bypass this restriction.
ReadOnly locks block all modification operations for all users, including Owners.

Anahtar Kavram

Azure resource locks enforce boundaries at subscription, resource group, or resource levels, inheriting down to all child resources. ReadOnly locks block both deletion and modification operations for all users, regardless of RBAC permissions.
Bu soruyu puanla