SC-900 · Question #54
Your company has just setup an Azure subscription. They have the following requirements - Be able to deploy a set of resources, resource groups, role assignments to a set of subscriptions. - Be able…
The correct answer is D. Azure Resource locks. Azure Resource Locks prevent users from accidentally or intentionally deleting or modifying critical resources. A 'CanNotDelete' lock allows read and modify operations but blocks deletion. Azure Policy (A) enforces compliance rules but cannot physically prevent a deletion…
Question
Your company has just setup an Azure subscription. They have the following requirements
- Be able to deploy a set of resources, resource groups, role
assignments to a set of subscriptions.
- Be able to ensure no one can delete resources defined in a resource
- Ensure that all Windows Servers defined as Azure virtual machines
should have the Microsoft IaaS Antimalware extension installed Which of the following can be used for the following requirement?
- Be able to ensure no one can delete resources defined in a resource
Options
- AAzure Policy
- BAzure Blueprints
- CAzure AD Identity Protection
- DAzure Resource locks
How the community answered
(27 responses)- B7% (2)
- C4% (1)
- D89% (24)
Explanation
Azure Resource Locks prevent users from accidentally or intentionally deleting or modifying critical resources. A 'CanNotDelete' lock allows read and modify operations but blocks deletion. Azure Policy (A) enforces compliance rules but cannot physically prevent a deletion action the way a lock does. Azure Blueprints (B) packages and deploys resources but does not lock them post-deployment. Azure AD Identity Protection (C) is focused on user identity risk, not resource protection.
Topics
Community Discussion
No community discussion yet for this question.