Microsoft Azure Fundamentals AZ-900 Practice Question

Resource Locks can be applied to resources, resource groups, or subscriptions to prevent accidental deletion or modification. By applying a lock, even users with the necessary permissions must first remove the lock before they can perform the restricted operation. This ensures critical resources remain protected during maintenance or other operations.

Access Control (IAM) and Role-Based Access Control (RBAC) manage permissions but do not prevent users with sufficient privileges from modifying or deleting resources. Azure Policy helps enforce organizational standards and assess compliance but does not block modifications in real-time.