HOTSPOT -
You have Azure subscriptions named Subscription1 and Subscription2.
Subscription1 has following resource groups:
RG1 includes a web app named App1 in the West Europe location.
Subscription2 contains the following resource groups:
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:
Box 1: No -
RG2 is read only. ReadOnly means authorized users can read a resource, but they cannot delete or update the resource.
Box 2: Yes -
Box 3: Yes -
Note:
App Service resources are region-specific and cannot be moved directly across regions. You can move the App Service resource by creating a copy of your existing App Service resource in the target region, then move your content over to the new app. You can then delete the source app and App Service plan.
To make copying your app easier, you can clone an individual App Service app into an App Service plan in another region.
Reference:
https://docs.microsoft.com/en-us/azure/app-service/manage-move-across-regions https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/move-limitations/app-service-move-limitations
Answer is Correct. Yes Yes Yes - the lock is only effecting the resources itself with edit/delete. Which means If the resource is in a resource group with no lock types then it is free to move to any other group even if the other group has lock type read only or delete. However if the resource is a RG with read-only lock , it can NOT be moved. In case of no delete lock , it can be moved.
You have clearly not tested this. If you did you would see the read-only lock prevents changed to the RG.
NYY, I just test it the first one , moving resources to a read-only RG will fail in the validation operation with "cannot perform write operation because following scope(s) are locked..."
Yes NYY is the correct answer, since move resources to read only RG will raise error "ResourceMovePolicyValidationFailed"
:O did fedztedz get one wrong?!?!
no, he is rght..the correct ans is YYY
Incorrect. Tested in my account. Cannot move resources to a RG which has Read-only lock.. Ans is N: Cant move Y: Can move Y: Can move
Earlier it's possible to RG even if it has RO lock. After move the lock effects on App moved to.
Correct Answer: Locks are designed for any update or removal. In this case we want to move only, we are not deleting, and we are not changing anything in the resource. For this reason, all of them are 'Y'. Box 1: Yes Box 2: Yes Box 3: Yes
I tested the first question and i cannot move resources in a RG with a Read-Only lock, so the Box1 should be "No"
Tried again, same. Cant move: {"code":"ResourceMovePolicyValidationFailed","message":"Resource move policy validation failed. Please see details. Diagnostic information: subscription id '082877ab-8970-41b0-8ba8-5246ccda0cbe', request correlation id 'eec62f30-ecd6-49b1-995c-e8efc3072e0a'.","details":[{"code":"ResourceMovePolicyValidationFailed","target":"Microsoft.Network/Microsoft.Network/virtualNetworks/test1","message":"{\"error\":{\"code\":\"ScopeLocked\",\"message\":\"The scope '/subscriptions/082877ab-8970-41b0-8ba8-5246ccda0cbe/resourcegroups/pk_test_2/providers/Microsoft.Network/virtualNetworks/test1' cannot perform write operation because following scope(s) are locked: '/subscriptions/082877ab-8970-41b0-8ba8-5246ccda0cbe/resourceGroups/pk_test_2'. Please remove the lock and try again.\"}}"}]}
Many thanks for the clarrification
Box 1 is No, you can not move when you have read only lock.
You are not correct in this case. Box 1 = N. I tested in lab and you cannot move a resource to an RG that has a read-only lock.
https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources?tabs=json A read-only lock on a resource group prevents you from moving existing resources in or out of the resource group. NYY
6/13/24 on exam
Read Lock just gives you Reader role on any resource. Can a person with Reader role move resources across resource group? Hence, the answer to first question is N. So it is N,Y,Y.
N-Y-Y A read-only lock on a resource group prevents users from moving any new resource into that resource group. https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources?tabs=json
No Yes Yes
Attention! The answer is N-Y-Y. Probably some things changed and cause that you gonna see a lot of YYY in he comments but are you e mayority old comments
Answer is correct: You cannot move a resource to a ReadOnly locked RG. Here is result of my test: cannot perform write operation because following scope(s) are locked: '/subscriptions/f8d93f6e-2b7c-4db1-b903-/resourceGroups/test'. Please remove the lock and try again.
N Y Y. Test in lab and RG1 resource cannot be moved to GRG2
what about others? did you test moving to Rg3 and RG4? those not in same app1 region? i got confused here
Anyone with a little Azure experience in real-world knows the answer is Y-Y-Y
No, you cannot directly move a web app from one resource group in a subscription to another resource group in a different subscription RG3 and RG4 are in subscription2 not in subscription1, then App1 cannot be moved to them.
1. N - "A read-only lock on a resource group prevents you from moving existing resources in or out of the resource group." 2. Y - nothing mentioned about "delete lock" move operations 3. Y - Neither rg1 or rg4 have locks. https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources?tabs=json
Correct: answer is N,Y,Y We can not move resources while Readonly lock is active https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources?tabs=json#:~:text=A%20read%2Donly%20lock%20on%20a%20resource%20group%20prevents%20you%20from%20moving%20existing%20resources%20in%20or%20out%20of%20the%20resource%20group.
What I find frustrating is that re-creating a new App Service and deleting the old one is referred to here as 'moving' the App Service, while in earlier questions we were told that moving a VM to a different VNET was not possible, instead we needed to re-create the VM and delete the old one. So in one case re-creation is called moving, in another case not.
Exam Topic admin Azure cloud undergoes a lot of changes now and then e.g. Log Analytics agent will be invalid after 2024-August. So please update the discussions which are not relevant to the current situation. A 3 year back discussion may be or not at all relevant. The below discussion confuses and makes to do a lot of researches and not able to come to a conclusion. Please be considerate to your clients who have purchased this course Answer is Correct. Yes Yes Yes - the lock is only effecting the resources itself with edit/delete. Which means If the resource is in a resource group with no lock types then it is free to move to any other group even if the other group has lock type read only or delete. However if the resource is a RG with read-only lock , it can NOT be moved. In case of no delete lock , it can be moved
NNY, When you move a Web App to a different subscription, the location of the Web App remains the same, but its policy is changed. For example, if your Web App is in Subscription1 located in Central US and has Policy1, and Subscription2 is in the UK South and has Policy2. If you move the Web App to Subscription2, the location of the Web App remains the same (Central US); however, it will be under the new policy which is policy2. LINK. https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/move-limitations/app-service-move-limitations
Isnt it No, No, No? An app is regional right, it cant be moved to another region you'll have to make a new app?