nerdexam
Microsoft

AZ-500 · Question #156

SIMULATION You need to prevent administrators from performing accidental changes to the Homepage app service plan. To complete this task, sign in to the Azure portal. Answer: You need to configure a…

A Read-Only lock on the App Service Plan is the correct approach because it prevents any modifications to the resource while still allowing administrators to view its configuration, effectively blocking accidental changes without removing access entirely. The lock must be…

Submitted by naveen.iyer· Mar 6, 2026Manage Azure identities and governance - specifically implementing and managing Azure resource locks to protect resources from accidental deletion or modification (AZ-104 Domain: Manage Azure Resources)

Question

SIMULATION You need to prevent administrators from performing accidental changes to the Homepage app service plan. To complete this task, sign in to the Azure portal. Answer: You need to configure a 'lock' for the app service plan. A read-only lock ensures that no one can make changes to the app service plan without first deleting the lock. 1. In the Azure portal, type App Service Plans in the search box, select App Service Plans from the search results then select Homepage. Alternatively, browse to App Service Plans in the left navigation pane. 2. In the properties of the app service plan, click on Locks. 3. Click the Add button to add a new lock. 4. Enter a name in the Lock name field. It doesn't matter what name you provide for the exam. 5. For the Lock type, select Read-only. 6. Click OK to save the changes.

Explanation

A Read-Only lock on the App Service Plan is the correct approach because it prevents any modifications to the resource while still allowing administrators to view its configuration, effectively blocking accidental changes without removing access entirely. The lock must be explicitly deleted before any changes can be made, adding a deliberate friction point that prevents accidental modifications. This is configured directly on the resource under the 'Locks' blade in the Azure portal, which is the native Azure Resource Manager (ARM) mechanism for protecting resources from unintended changes.

Topics

#Azure Resource Locks#Resource Management#App Service Plans#Azure Governance

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice