Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 3 question 23 discussion

Actual exam question from Microsoft's AZ-500

Question #: 23
Topic #: 3

HOTSPOT -
You have an Azure subscription that contains the virtual machines shown in the following table.

You create the Azure policies shown in the following table.

You create the resource locks shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

References:
https://docs.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking

by JohnCrawford at Oct. 22, 2019, 5:29 p.m.

Comments

Submit Cancel

snelkoppeling

Highly Voted 5 years, 2 months ago

You cannot start VM1 because of read only lock on VM1 You cannot start VM2 because of read only lock on RG2 You cannot create a new VM in RG2 because of read only lock on RG2

upvoted 396 times

prd0202

3 years, 9 months ago

No doubt - it is No, No, No

upvoted 14 times

...

AP_Singh

5 years ago

your answers are all correct ReadOnly means authorized users can read a resource, but they can't delete or update the resource. Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role.

upvoted 13 times

...

sureshatt

3 years, 10 months ago

this is the correct answer.

upvoted 6 times

OpsecDude

2 years, 4 months ago

Exactly, I mean Read only is Read only. I you placed a Read only lock is because you want nothing to be modified at all

upvoted 2 times

...

xBoy

3 years, 10 months ago

No/No/No. Tested on LAB

upvoted 14 times

...

Load full discussion...

...

jbarszcz

Highly Voted 4 years, 10 months ago

just tested it. No/No/No

upvoted 75 times

...

golitech

Most Recent 6 months ago

NYN RG2 is read only, but starting a VM can be done (it is an operation), but we cannot create a VM. RG2 is read-only. it overwrites the policy. Lock is stronger that the policy

upvoted 1 times

rvln7

2 weeks, 3 days ago

Resource locks and Azure Policy operate at different layers, and neither “overwrites” the other. A Read-only lock at the resource group scope blocks all control-plane write operations (create, update, delete) for any resource under that group. Azure Policy’s “allowed resource types” setting only governs what types you can deploy—it doesn’t override or bypass locks.

upvoted 1 times

...

Pamban

8 months, 3 weeks ago

NNN lab tested

upvoted 2 times

...

bobbywong234

11 months ago

A lot of fools forgot to read the second table, Azure policy

upvoted 1 times

...

flafernan

1 year, 1 month ago

No, No, No.

upvoted 3 times

...

AZ5002023

1 year, 2 months ago

tested on lab : NO NO NO

upvoted 4 times

...

wardy1983

1 year, 3 months ago

You cannot start VM1 because of read only lock on VM1 You cannot start VM2 because of read only lock on RG2 You cannot create a new VM in RG2 because of read only lock on RG2

upvoted 5 times

...

Feraso

1 year, 3 months ago

Correct Answer Pay attention to where the look is applied. Refer to: https://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking#locking-modes-and-states Read Only Resource group Cannot Edit / Delete The resource group is read only and tags on the resource group can't be modified. Not Locked resources can be added, moved, changed, or deleted from this resource group. Read Only Non-resource group Read Only The resource can't be altered in any way. No changes and it can't be deleted. When the lock is applied on the resource itself(VM1), we won't be able to make any changes. Hence, we can't start it. However, when the lock is applied on the Resource Group, then VM2 is not locked resource, thus, we will be able to change it. Therefore, we can start VM2 and we can create a VM in RG2.

upvoted 2 times

jim0thy

1 week, 2 days ago

nope. VM2 is in RG2, and RG2 is locked. You won't be able to stop or start that VM, try it in your own portal.

upvoted 1 times

...

ErikPJordan

1 year, 4 months ago

Computer says no no no

upvoted 3 times

...

ESAJRR

1 year, 5 months ago

1000x No/No/No

upvoted 2 times

...

heatfan900

1 year, 5 months ago

n, n, n Both VMs have READ-ONLY LOCKS VM1 directly and VM2 via the lock to RG2 The policy plays no part here

upvoted 2 times

...

ykamal

1 year, 6 months ago

Can the admins fix this exam please? There are too many incorrect answers. For this question it is NNN.

upvoted 3 times

...

Franc_Coetzee

1 year, 7 months ago

The resource group is read only and tags on the resource group can't be modified. Not Locked resources can be added, moved, changed, or deleted from this resource group. https://learn.microsoft.com/en-us/azure/governance/blueprints/concepts/resource-locking

upvoted 1 times

...

Maged_nader12

1 year, 10 months ago

so why ET leaves these wrong answers on the questions !!! so why are we paying for this shit !

upvoted 5 times

...

mskott

1 year, 10 months ago

The read-only lock only affects the ability to modify or delete resources within the resource group, but it does not prevent the creation of new resources in the resource group. So, you can create a new VM in the resource group with a read-only lock without any issues. So it is No-No-Yes

upvoted 1 times

...

majstor86

1 year, 11 months ago

No No No

upvoted 2 times

...

Load full discussion...