Exam AZ-900 topic 1 question 455 discussion

The correct answer is **B. Apply a read-only lock to RG1**. ### Explanation: A **read-only lock** prevents users from making any modifications to resources within the resource group, including adding, updating, or deleting resources. It also ensures that the resource group itself cannot be deleted. This meets all the requirements stated in the scenario. ### Why not the other options? - **A. Apply a delete lock to RG1**: A delete lock would prevent users from deleting RG1 but does not restrict modifications to resources within RG1. - **C. Grant role-based access control (RBAC) permissions to RG1**: RBAC permissions provide access control but require detailed configuration and may not completely restrict all the specified actions. - **D. Add a tag to RG1**: Tags are used for organizing resources and do not control access or prevent actions.

ReadOnly: Prevents both modifications and deletion of the resource

Read-only: This lock type prevents users from modifying or deleting the resource group and its resources. CanNotDelete: This lock type prevents users from deleting the resource group but allows modifications.

I think we should get a : - delete lock on RG1 =====> Answer A - read only lock on RG1 resources only ====> Not mentioned in the possible choices Additionally, I understand there is no inheritance on a RG and its resources. So it should be answer A. Am I wrong ?

B. Apply a read-only lock to RG1. A read-only lock will prevent users from making any modifications or deletions to the resource group and its resources. This lock type ensures that all resources within RG1 can only be read, not modified or deleted