nerdexam
Microsoft

AZ-500 · Question #162

SIMULATION You need to configure a virtual network named VNET2 to meet the following requirements: Administrators must be prevented from deleting VNET2 accidentally. Administrators must be able to…

A Delete lock on VNET2 is the correct solution because it prevents accidental deletion of the resource while still allowing administrators to make modifications, such as adding subnets. The Read-only lock would be too restrictive as it would prevent both deletion AND…

Submitted by carlos_mx· Mar 6, 2026Manage Azure identities and governance - specifically implementing resource locks to protect critical Azure resources from accidental deletion or modification, aligned with the AZ-104 Microsoft Azure Administrator certification.

Question

SIMULATION You need to configure a virtual network named VNET2 to meet the following requirements: Administrators must be prevented from deleting VNET2 accidentally. Administrators must be able to add subnets to VNET2 regularly. To complete this task, sign in to the Azure portal and modify the Azure resources. Answer: Locking prevents other users in your organization from accidentally deleting or modifying critical resources, such as Azure subscription, resource group, or resource. Note: In Azure, the term resource refers to an entity managed by Azure. For example, virtual machines, virtual networks, and storage accounts are all referred to as Azure resources. 1. In the Azure portal, type Virtual Networks in the search box, select Virtual Networks from the search results then select VNET2. Alternatively, browse to Virtual Networks in the left navigation pane. 2. In the Settings blade for virtual network VNET2, select Locks. 3. To add a lock, select Add. 4. For Lock type select Delete lock, and click OK

Explanation

A Delete lock on VNET2 is the correct solution because it prevents accidental deletion of the resource while still allowing administrators to make modifications, such as adding subnets. The Read-only lock would be too restrictive as it would prevent both deletion AND modification (including adding subnets), which contradicts the second requirement. By applying only a Delete lock, both requirements are satisfied: protection from accidental deletion and the ability to continue managing subnets.

Topics

#Azure Resource Locks#Virtual Networks#Resource Governance#Azure Portal Administration

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice