An Azure administrator needs to prevent users from accidentally deleting a virtual machine named VM-Prod. However, users must still be able to start, stop, and resize the virtual machine. Which configuration should the administrator apply to VM-Prod?
- A CanNotDelete resource lockCevap
- BA ReadOnly resource lock
- CAn Azure Policy with a Deny effect
- DAn Azure Policy that retroactively removes permissions
Cevap
A CanNotDelete resource lock
The configuration utilizing a CanNotDelete resource lock is correct because it prevents users from deleting the virtual machine while still permitting them to modify its state (such as starting, stopping, or resizing).
Adım Adım Çözüm
Anahtar Kavram
Azure Resource Locks prevent accidental deletion or modification of critical Azure resources.