An administrator applies a ReadOnly resource lock and a resource tag named Dept: Finance to an Azure resource group. The resource group contains an Azure Cosmos DB database account. A developer attempts to read the tags on the Cosmos DB account and modify its default consistency level. What is the outcome of these actions?
- The developer can read the tags but is blocked from modifying the consistency level, and the Cosmos DB account does not inherit the Dept: Finance tag.Cevap
- BThe developer is blocked from modifying the consistency level, and the Cosmos DB account automatically inherits the Dept: Finance tag.
- CThe developer can successfully modify the consistency level because the ReadOnly lock only prevents resource deletion, and the Cosmos DB account does not inherit the Dept: Finance tag.
- DThe developer can successfully modify the consistency level if they are assigned the Owner role because role-based access control (RBAC) permissions override resource locks, and the Cosmos DB account does not inherit the Dept: Finance tag.
Cevap
The developer can read the tags but is blocked from modifying the consistency level, and the Cosmos DB account does not inherit the Dept: Finance tag.
A ReadOnly resource lock applied to a resource group is inherited by all resources within that group, preventing any configuration updates (such as changing the database consistency level) but still permitting read actions (such as viewing the resource configuration). Additionally, resource tags applied to a resource group are not inherited by the resources inside that group.
Adım Adım Çözüm
Anahtar Kavram
Resource Lock and Tag Inheritance