AZ-900 Exam - Question 467

Correct Y - "ReadOnly means authorized users can read a resource, but they can't delete or update it. Applying this lock is similar to restricting all authorized users to the permissions that the Reader role provides." https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources?tabs=json Y - "CanNotDelete means authorized users can read and modify a resource, but they can't delete it." https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources?tabs=json Y- "When you apply a lock at a parent scope, all resources within that scope inherit the same lock. Even resources you add later inherit the same parent lock. The most restrictive lock in the inheritance takes precedence." https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources?tabs=json#lock-inheritance

YYY -Correct