exam questions

Exam AZ-900 All Questions

View all questions & answers for the AZ-900 exam

Exam AZ-900 topic 1 question 276 discussion

Actual exam question from Microsoft's AZ-900
Question #: 276
Topic #: 1
[All AZ-900 Questions]

HOTSPOT -
You create a resource group named RG1 in Azure Resource Manager.
You need to prevent the accidental deletion of the resources in RG1.
Which setting should you use? To answer, select the appropriate setting in the answer area.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
You can configure a lock on a resource group to prevent the accidental deletion.
As an administrator, you may need to lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. You can set the lock level to CanNotDelete or ReadOnly. In the portal, the locks are called Delete and Read-only respectively.
✑ CanNotDelete means authorized users can still read and modify a resource, but they can't delete the resource.
✑ ReadOnly means authorized users can read a resource, but they can't delete or update the resource. Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role.
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Abdelbaki
Highly Voted 3 years ago
Correct
upvoted 10 times
...
Mikalai271
Most Recent 7 months ago
This question was in my exam on July 3, 2024
upvoted 1 times
...
liya1
9 months, 3 weeks ago
got this on 22nd
upvoted 1 times
...
Tehkl
9 months, 4 weeks ago
its in the exam - 17-April-2024
upvoted 1 times
...
zellck
2 years, 1 month ago
"Locks" is the answer. https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources As an administrator, you can lock an Azure subscription, resource group, or resource to protect them from accidental user deletions and modifications. The lock overrides any user permissions. You can set locks that prevent either deletions or modifications. In the portal, these locks are called Delete and Read-only. In the command line, these locks are called CanNotDelete and ReadOnly. - CanNotDelete means authorized users can read and modify a resource, but they can't delete it.
upvoted 2 times
zellck
2 years, 1 month ago
https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/4-describe-purpose-of-resource-locks A resource lock prevents resources from being accidentally deleted or changed. Even with Azure role-based access control (Azure RBAC) policies in place, there's still a risk that people with the right level of access could delete critical cloud resources. Resource locks prevent resources from being deleted or updated, depending on the type of lock. Resource locks can be applied to individual resources, resource groups, or even an entire subscription. Resource locks are inherited, meaning that if you place a resource lock on a resource group, all of the resources within the resource group will also have the resource lock applied.
upvoted 1 times
...
...
TonyghostR05
2 years, 4 months ago
Lock to prevent the deletion
upvoted 2 times
...
CodePro
2 years, 10 months ago
Correct
upvoted 1 times
...
tacobear
2 years, 11 months ago
it was on exam on 03/12/2022.
upvoted 1 times
...
iedodo
2 years, 11 months ago
Azure resources locks are designed to prevent accidental deletion and/or modification. Locks are used in conjunction with RBAc
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago