Exam AZ-500 topic 3 question 27 discussion

Actual exam question from Microsoft's AZ-500

Question #: 27
Topic #: 3

SIMULATION -
You need to configure a virtual network named VNET2 to meet the following requirements:
✑ Administrators must be prevented from deleting VNET2 accidentally.
✑ Administrators must be able to add subnets to VNET2 regularly.
To complete this task, sign in to the Azure portal and modify the Azure resources.

Show Suggested Answer

Suggested Answer: See the explanation below.
Locking prevents other users in your organization from accidentally deleting or modifying critical resources, such as Azure subscription, resource group, or resource.
Note: In Azure, the term resource refers to an entity managed by Azure. For example, virtual machines, virtual networks, and storage accounts are all referred to as Azure resources.
1. In the Azure portal, type Virtual Networks in the search box, select Virtual Networks from the search results then select VNET2. Alternatively, browse to
Virtual Networks in the left navigation pane.
2. In the Settings blade for virtual network VNET2, select Locks.

3. To add a lock, select Add.

4. For Lock type select Delete lock, and click OK
Reference:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

by LJack at March 17, 2021, 12:43 a.m.

Comments

Submit Cancel

LJack

Highly Voted 3 years, 7 months ago

This is the correct procedure for requirements outlined.

upvoted 8 times

...

mrt007

Highly Voted 7 months, 2 weeks ago

Sign in to the Azure portal at https://portal.azure.com. In the left-hand menu, click on “Virtual networks”. In the virtual networks pane, find and click on VNET2. To prevent accidental deletion, you can use Locks. Here’s how: In the VNET2 pane, click on “Locks” under the Settings section. Click on “+ Add”. Provide a name for the lock, select “Delete” for the lock type, and click “OK”. This will prevent accidental deletion of VNET2. To allow administrators to add subnets regularly, you don’t need to do anything special because by default, administrators have the necessary permissions to add subnets. Here’s how to add a subnet: In the VNET2 pane, click on “Subnets” under the Settings section. Click on “+ Subnet”. Provide the necessary details for the subnet and click “OK”.

upvoted 5 times

...

Tash95

Most Recent 2 years, 8 months ago

For the "Administrators must be able to add subnets to VNET2 regularly." part, would admins always have this permission? Or would we have to assign the Network Contributor role to an admin user during the exam?

upvoted 4 times

Mugamed

1 year, 6 months ago

Network contributor is the correct role.

upvoted 2 times

...

Rick_C137

2 years, 6 months ago

This is to mean that they want you to choose the "Delete" lock type as opposed to the "Read-Only". Both would not allow you to delete but only "Delete" would still allow admins to add subnets.

upvoted 12 times

...

Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam