nerdexam
Microsoft

70-473 · Question #99

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…

The correct answer is B. No. Placing a delete lock on an Azure server resource does not absolutely prevent administrators from deleting it if they possess the permissions to remove the lock itself.

Design and implement data security

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen. You have a Microsoft Azure Database for MySQL Server named SQLDB1. Four database administrators manage SQLDB1. You need to prevent any administrator from deleting the server that hosts SQLDB1. Solution: You create a delete lock on the server resource in Azure. Does this meet the goal?

Options

  • AYes
  • BNo

How the community answered

(59 responses)
  • A
    19% (11)
  • B
    81% (48)

Why each option

Placing a delete lock on an Azure server resource does not absolutely prevent administrators from deleting it if they possess the permissions to remove the lock itself.

AYes

While a delete lock prevents accidental deletion, administrators with sufficient Azure permissions (e.g., Owner or User Access Administrator) can remove the lock itself, thereby bypassing the protection and allowing them to delete the server.

BNoCorrect

Concept tested: Azure Resource Locks limitations

Source: https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources

Topics

#Azure Database for MySQL#resource locks#data security#governance

Community Discussion

No community discussion yet for this question.

Full 70-473 Practice