AZ-900 · Question #503
AZ-900 Question #503: Real Exam Question with Answer & Explanation
The correct answer is B: Apply a read-only lock to RG1.. Read-only: This lock type prevents users from modifying or deleting the resource group and its CanNotDelete: This lock type prevents users from deleting the resource group but allows
Question
You have an Azure subscription that contains a resource group named RG1. Users must NOT be able to perform the following operations: - Delete RG1. - Modify resources in RG1. - Delete resources from RG1. What should you do?
Options
- AApply a delete lock to RG1.
- BApply a read-only lock to RG1.
- CGrant role-based access control (RBAC) permissions to RG1.
- DAdd a tag to RG1.
Explanation
Read-only: This lock type prevents users from modifying or deleting the resource group and its CanNotDelete: This lock type prevents users from deleting the resource group but allows
Community Discussion
1B is correct because a read-only lock blocks all write and delete operations, while a delete lock only prevents deletion but still allows modifications.