AZ-104 Question 37
Single answerYou are an Azure Administrator for an e-commerce company. The development team frequently updates resources within a shared Resource Group, but management wants to prevent the entire Resource Group from being accidentally removed. Developers must continue to modify and redeploy these resources. Which lock configuration should you apply to meet this requirement?
- A
Apply a ReadOnly lock at the Resource Group level
- B
Apply a Delete lock at the Resource Group level
- C
Apply a ReadOnly lock at each individual resource level
- D
Apply a Delete lock at the subscription level
Show answer and explanation
Correct answer: B
Explanation
By applying a Delete lock at the Resource Group level, you protect the entire Resource Group and its resources from accidental removal while still permitting normal operational tasks like updating and scaling within the Resource Group.
- A. Incorrect.
A ReadOnly lock disallows all modifications, so developers would not be able to update or modify any resources.
- B. Correct.
A Delete lock at the Resource Group level prevents the Resource Group and its resources from being deleted while still allowing modifications.
- C. Incorrect.
Applying a ReadOnly lock at the resource level would prevent all changes to those resources, which is not required.
- D. Incorrect.
A Delete lock at the subscription level would prevent deletion of all Resource Groups within that subscription, rather than just protecting this specific Resource Group.