Microsoft Azure Administrator Associate AZ-104 Practice Question
A company wants to protect important Azure resources from accidental modification or deletion by users. Which feature should they use to set such protection on these resources?
Resource locks provide a dedicated management feature that can be applied at the subscription, resource-group, or individual resource level with two modes: CanNotDelete (Delete) and ReadOnly. A lock overrides all RBAC permissions, ensuring that even users who normally have delete or write rights cannot perform those operations until the lock is removed.
Azure Policy can also block create, update, or delete operations through deny or denyAction effects, but it requires a specific policy definition and assignment intended for compliance scenarios rather than quick, ad-hoc protection. Azure RBAC controls who may act on a resource, yet an authorized user can still modify or delete it. Azure Blueprints can attach ReadOnly or DoNotDelete locks to the artifacts it deploys, but that capability is limited to resources managed by the blueprint assignment; for protecting any existing standalone resource, management locks are the simplest and most direct choice.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What are Resource Locks and how do they work?
Open an interactive chat with Bash
How do Resource Locks differ from Azure Policies?
Open an interactive chat with Bash
What is Role-Based Access Control (RBAC) and how does it relate to Resource Locks?
Open an interactive chat with Bash
Microsoft Azure Administrator Associate AZ-104
Manage Azure identities and governance
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access