Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceEasy
A media company uses Azure Blob Storage to store large video files. They want to prevent accidental deletion or modification of critical files by users or applications, including changes to resource properties or tags. Which Azure feature should they implement to protect these resources from unintended changes?
- AAzure Backup
- BAzure Resource Locks
- CAzure Policy
- DAzure Role-Based Access Control (RBAC)
Show answer & explanationAnswer & explanation
Correct answer: B. Azure Resource Locks
Azure Resource Locks prevent users from accidentally deleting or modifying critical resources, including resource properties and tags. They can be applied at various scopes, such as a subscription, resource group, or individual resource.
Why the other options are wrong
- A. Azure Backup protects data by creating restorable copies, but it doesn't prevent the original resource from being deleted or modified.
- C. Azure Policy enforces organizational standards but doesn't specifically block actions like deletion or modification once a resource is compliant.
- D. Azure RBAC controls who can perform what actions, but a user with delete permissions can still delete if not blocked by a lock.
Azure Resource Locks
Azure Resource Locks prevent accidental deletion or modification of Azure resources. They can be applied at the subscription, resource group, or individual resource level.
- Supported lock types: CanNotDelete and ReadOnly.
- Overrides RBAC permissions for protection.
- Applied to critical resources or environments.
Memory trick: Locks Leave Lasting Legacy.