Soru

Zorluk: KolayResource Locks

An organization needs to prevent the accidental deletion of a production database account in Azure. However, administrators must still be able to modify the database configuration settings and scale its throughput as needed. Which resource lock should be applied to meet these requirements?

  1. A
    A ReadOnly lock
  2. A CanNotDelete lockCevap
  3. C
    A Reader role assignment using Azure role-based access control (Azure RBAC)
  4. D
    An Azure Policy deny assignment

Cevap

A CanNotDelete lock
A CanNotDelete lock blocks the deletion of a resource, but allows users to read and modify its configuration. This satisfies the requirement to protect the database from deletion while allowing administrators to modify settings and scale throughput.

Adım Adım Çözüm

1
Analyze the requirements to determine the allowed and blocked actions.
Deletion must be blocked, but modifications and updates (such as scaling throughput) must be permitted.
This helps determine the specific lock behavior needed.
2
Evaluate the difference between Azure resource lock types.
A ReadOnly lock blocks both modifications and deletion, whereas a CanNotDelete lock only blocks deletion and allows modifications.
This ensures the selected lock type does not disrupt normal administrative tasks.
3
Select the lock type that permits updates but denies deletion.
A CanNotDelete lock satisfies all constraints of the scenario.
It successfully prevents accidental deletion while leaving configuration and scaling controls active.

Anahtar Kavram

Azure Resource Locks prevent accidental deletion or modification of resources. A CanNotDelete lock allows read and update operations but blocks deletion, whereas a ReadOnly lock blocks both modifications and deletion.
Tahmini Süre:45s
Bu soruyu puanla