Examkin

Soru

Zorluk: OrtaResource Locks

To protect a critical production storage account, a `CanNotDelete` lock is configured directly on the storage resource. An IT technician can still rotate the storage account's access keys without removing the lock.

Cevap: Cevap

Cevap

True
A CanNotDelete lock restricts users from deleting the resource, but allows reading and modifying the resource. Since rotating access keys is a modification operation, it is fully permitted under a CanNotDelete lock.

Adım Adım Çözüm

1
Analyze the lock type applied to the resource.
The resource has a CanNotDelete lock applied.
Understanding the restriction type is critical to determining which operations are blocked.
2
Determine the operations blocked by a CanNotDelete lock.
A CanNotDelete lock prevents deletion but allows reading and modifying resource configurations.
This distinguishes it from a ReadOnly lock, which prevents both deletions and modifications.
3
Evaluate whether rotating storage account keys is a modification or deletion action.
Rotating keys modifies the configuration of the storage account and is not a deletion operation.
Since it is a modification, it is allowed under a CanNotDelete lock.

Anahtar Kavram

Azure Resource Locks prevent accidental deletion or modification of resources. A CanNotDelete lock prevents deletion but allows modification, while a ReadOnly lock prevents both deletion and modification.
Tahmini Süre:45s
Bu soruyu puanla

Konular

Resource Locks

Bu konudan daha fazla soru