An organization needs to prevent the accidental deletion of a production database account in Azure. However, administrators must still be able to modify the database configuration settings and scale its throughput as needed. Which resource lock should be applied to meet these requirements?
- AA ReadOnly lock
- A CanNotDelete lockCevap
- CA Reader role assignment using Azure role-based access control (Azure RBAC)
- DAn Azure Policy deny assignment
Cevap
A CanNotDelete lock
A CanNotDelete lock blocks the deletion of a resource, but allows users to read and modify its configuration. This satisfies the requirement to protect the database from deletion while allowing administrators to modify settings and scale throughput.
Adım Adım Çözüm
Anahtar Kavram
Azure Resource Locks prevent accidental deletion or modification of resources. A CanNotDelete lock allows read and update operations but blocks deletion, whereas a ReadOnly lock blocks both modifications and deletion.
Tahmini Süre:45s