AZ-500 Question #260: Real Exam Question with Answer & Explanation

Question

A company has a single Azure subscription on resources are deployed. There is a resource group where company's production resources are created. That resource group is called production-rg. There is another resource group where company's development resources are created. That resource group is called development-rg. The development team is assigned the Contributor role to the development-rg resource group. The development team uses three software to make regular configuration changes to the resources of development-rg, as part of their testing. They use the Azure portal, PowerShell, and Azure CLI. You want to make sure development team can work without having the existing files deleted by any user. What would you do?

Options

• ARemove the development team from the Contributor role and assign them the Reader role on the
• BCreate a ReadOnly lock on the development-rg resource group.
• CCreate a CanNotDelete lock on the development-rg resource group.
• DCreate a custom role that contains the "Microsoft.Compute/virtualMachines/delete" operation in