Exam AZ-500 topic 4 question 62 discussion

No/No/No 1. Blueprint doesn't work on existing resources. 2. RG2 is read-only and "The resource group is read only and tags on the resource group can't be modified. " 3. The newly created RG2 is read-only and nothing can be changed before you changed/deleted blueprint assignment.

No-Yes-No Blueprint locks don't work on the existing resources "Resource locks deployed by Azure Blueprints are only applied to non-extension resources deployed by the blueprint assignment. Existing resources, such as those in resource groups that already exist, don't have locks added to them."

It should be NO,NO,NO we cannot add tags while read only lock in place..just tested

No - Blueprint doesn't change existing resources and definition does not mention RG1 Yes - Tags are excluded from read-only lock No - because of Blueprint with read-only lock

Here as a first step, we need to know Azure BluePrint does not affect existing resource before the assignment of it. In this configuration we assign it to the RG2 and RG1 is already exists and nothing will not affect RG1. Box-1 No, rg1 is already exist. Box-2 rg2 is created with blueprint that and it is in read only that is why we cannot add anything there -No Box-3 We cannot remove the role of User1 as RG2 is in the read only. All in all, answer will be here NO, NO, NO BR

Mode Artifact Resource Type State Description Don't Lock * Not Locked Resources aren't protected by Azure Blueprints. This state is also used for resources added to a Read Only or Do Not Delete resource group artifact from outside a blueprint assignment. Read Only Resource group Cannot Edit / Delete The resource group is read only and all its properties, except for tags, can't be modified. Not Locked resources can be added, moved, changed, or deleted from this resource group. Read Only Non-resource group Read Only Except for tags, the resource remains unalterable and cannot be deleted or modified. Do Not Delete * Cannot Delete The resources can be altered, but can't be deleted. Not Locked resources can be added, moved, changed, or deleted from this resource group. https://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking#locking-modes-and-states Tags are not included in read only

1. Blueprint doesn't work on existing resources. 2. RG2 is read-only and "The resource group is read only and tags on the resource group can't be modified. " 3. The newly created RG2 is read-only and nothing can be changed before you changed/deleted blueprint assignment.

Resource locks deployed by Azure Blueprints are only applied to non-extension resources deployed by the blueprint assignment. Existing resources, such as those in resource groups that already exist, don't have locks added to them.

NNN is the answer. https://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking Resource locks deployed by Azure Blueprints are only applied to non-extension resources deployed by the blueprint assignment. Existing resources, such as those in resource groups that already exist, don't have locks added to them. https://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking#locking-modes-and-states

NO YES NO

Given answer is correct No/YEs/NO Just tested on lab

Blueprints not in exam objectives as of 29th Sept 2021, just checked, so should not appear in exam then, correct? if so, moderator, please remove.

- A locking mode of Read only will be assigned to RG1 -> No, Blueprint1 has no configuration related to RG1. - User1 can add tags to RG2 -> Yes, Since Resource locks deployed by Azure Blueprints does not apply to Existing resources such as resource groups. - You can remove User1 from the tag contributor role of RG2 -> No, user who can create a blueprint might not have the permission to amend other user role.

Correct answer