identitySingle choice
A resource group named RG1 has a CanNotDelete lock. You are assigned the Owner role for the subscription. You attempt to delete a virtual network named VNet1 that is in RG1. What is the result?
الـ Resource group اللي اسمها RG1 عليها CanNotDelete lock، وإنت واخد دور Owner على الـ Subscription. بتحاول تمسح Virtual network اسمها VNet1 موجودة في RG1. إيه النتيجة؟
- AVNet1 is deleted because the Owner role overrides locks.
- BThe deletion fails. You must remove the lock before you can delete VNet1.
- CVNet1 is deleted, but RG1 cannot be deleted.
- DVNet1 is moved to a soft-deleted state for 14 days.
Why: Resource locks apply to every user regardless of their RBAC role, and a lock on a resource group is inherited by all resources inside it. A CanNotDelete lock therefore blocks deleting VNet1 even for an Owner. An Owner (or User Access Administrator) can remove the lock, delete the VNet and re-create the lock. Owner does not bypass locks, the lock is not limited to the group itself, and VNets have no soft-delete state.
Exam skills it covers
- Configure resource locks