exam questions

Exam AZ-300 All Questions

View all questions & answers for the AZ-300 exam

Exam AZ-300 topic 4 question 11 discussion

Actual exam question from Microsoft's AZ-300
Question #: 11
Topic #: 4
[All AZ-300 Questions]

You have a resource group named RG1. RG1 contains an Azure Storage account named storageaccount1 and a virtual machine named VM1 that runs Windows
Server 2016.
Storageaccount1 contains the disk files for VM1.
You apply a ReadOnly lock to RG1.
What can you do from the Azure portal?

  • A. Start VM1
  • B. Upload a blob to storageaccount1
  • C. View the keys of storageaccount1
  • D. generate an automation script for RG1
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
ReadOnly allows authorized users to read a resource, but they can't delete or update the resource. Applying this lock is similar to restricting all authorized users to the permissions granted by the Reader role.
References:
https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Rakeshsuryawanshi
Highly Voted 5 years, 6 months ago
Answer is D, I have tried this on my subscription
upvoted 25 times
...
VK
Highly Voted 5 years, 7 months ago
not sure if viewing the keys and listing the keys are considered equivalent.. microsoft doc says this "A ReadOnly lock on a storage account prevents all users from listing the keys." ( URL : https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources)
upvoted 15 times
dumpmaster
5 years, 6 months ago
It's D, I did a lab for this question.
upvoted 49 times
praveen97
4 years, 10 months ago
Even I have tested it. Answer is D. Once the Read-only lock is applied, Go to Resource Group -> Settings -> Export Template. Then it will generate the template to automate the deployment process.
upvoted 4 times
tartar
4 years, 9 months ago
D is ok
upvoted 2 times
...
...
...
...
Phoenix87
Most Recent 3 years, 9 months ago
Upload a blob to storageaccount1 is possible if we have readonly lock on RG1 since we are trying to modify the data not resource properties. When a R/O lock is put on a resource, you lock it's properties not the resource. So while a read only lock is present on a storage account(inherited from a resource group), a file can still be uploaded to the already existing container of a storage account.
upvoted 2 times
...
azurecert2021
4 years, 4 months ago
yes answer should be D
upvoted 1 times
...
AhmedAL
4 years, 8 months ago
it should be D
upvoted 1 times
...
mariuszp
4 years, 8 months ago
Checked on Azure, when Lock is applied there is and error when viewing the storage account Access Keys: "Access blocked The resource is locked Cannot access the data plane because of a read lock on the resource or its parent." D is correct
upvoted 1 times
...
AzNewGeek
4 years, 8 months ago
Correct Answer is D. Tested option C and is not working. it says "Cannot access the data plane because of a read lock on the resource or its parent."
upvoted 1 times
...
anishk
4 years, 9 months ago
C is correct. I could view the access keys. I couldn't start the VM
upvoted 1 times
anishk
4 years, 8 months ago
after clearing cache and restarting browser, i couldnt see access key. D worked
upvoted 1 times
...
...
Rooh
4 years, 10 months ago
the correct answer is D
upvoted 1 times
...
wcj_55
4 years, 10 months ago
The answer should be D: (According to the documentation https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources?WT.mc_id=ITOpsTalk-blog-nepeters ) When you apply a lock at a parent scope (resource group), all resources within that scope inherit the same lock. Even resources you add later inherit the lock from the parent.
upvoted 1 times
...
gboyega
4 years, 11 months ago
Correct answer is D
upvoted 4 times
gnoamchomsky
4 years, 10 months ago
Can confirm! Just tested it and I was only able to generate the automation script.
upvoted 1 times
...
andyR
4 years, 8 months ago
thanks gboyega
upvoted 1 times
...
...
DeveshSolanki
4 years, 11 months ago
ANS - D. generate an automation script for RG1
upvoted 1 times
...
Albelev
4 years, 11 months ago
Correct answer is D https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resource
upvoted 1 times
...
Prash85
4 years, 11 months ago
Answer is D - https://github.com/Azure/azure-cli/issues/8452
upvoted 1 times
...
kondapaturi
5 years ago
D is correct
upvoted 1 times
...
AnshMan
5 years ago
When you set a lock on Resource Group with Read Only. Except D all options are not possible (Where you have an option to download/deploy from "Export Template" blade in the Resource Group).
upvoted 2 times
...
MukeshKhamparia
5 years ago
For answer C - I tested it it is clearly saying "Access Key" - Cannot access the data plane because of a read lock on the resource or its parent. WIll go with D as other have tested already.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...