Soru

Zorluk: KolayResource Locks

A CanNotDelete lock is configured on an Azure subscription. A resource group named rg-sales within the subscription contains a virtual machine named vm-sales. What is the impact of this lock on the virtual machine?

  1. Authorized users can modify the configuration of the virtual machine, but they cannot delete the virtual machine.Cevap
  2. B
    Authorized users are prevented from making configuration changes to the virtual machine and from deleting it.
  3. C
    Authorized users can delete the virtual machine because locks applied at the subscription level do not inherit to resources.
  4. D
    Authorized users can delete the virtual machine, but they cannot modify its configuration.

Cevap

Authorized users can modify the configuration of the virtual machine, but they cannot delete the virtual machine.
The correct answer is correct because Azure resource locks applied at a parent scope (such as a subscription) are inherited by all child resources. The CanNotDelete lock type allows authorized users to read and modify resource configurations, but prevents them from deleting the resource.

Adım Adım Çözüm

1
Determine the scope and inheritance of the resource lock.
The lock is applied at the subscription level, which means it is inherited by all child resource groups and resources, including the virtual machine.
Azure resource locks automatically inherit down the resource hierarchy (Subscription -> Resource Group -> Resource).
2
Identify the behavior of the CanNotDelete lock type.
A CanNotDelete lock prevents deletion of the resource, but allows all modify and read operations.
The CanNotDelete lock restricts only the delete operations, unlike the ReadOnly lock which restricts both delete and update operations.
3
Combine the inheritance rule and lock type behavior to evaluate the outcome.
The virtual machine inherits the CanNotDelete lock, meaning users can modify its settings but cannot delete it.
Since the lock is inherited from the parent subscription, its deletion restriction applies to the virtual machine while still allowing configuration changes.

Anahtar Kavram

Resource Lock Inheritance and CanNotDelete Behavior
Tahmini Süre:45s
Bu soruyu puanla