During a cleanup sprint at a utilities company, an operator deleted the wrong resource group and caused a production outage. Management asks for the simplest built-in guardrail that prevents anyone from accidentally deleting the critical production database, while normal configuration changes must continue. What should the team apply?

1. A. A ReadOnly lock, which blocks both updates and deletions of the database 💬 A
2. B. A Delete (CanNotDelete) lock, which lets authorized users modify the database but blocks its deletion ✓ B
3. C. A tag named Protection with the value DoNotDelete, which marks the database as critical 💬 C
4. D. An Azure Policy assignment with the Audit effect, which reports any attempt to delete the database 💬 D

Revelar gabarito

Resposta correta: A Delete (CanNotDelete) lock, which lets authorized users modify the database but blocks its deletion

Referência: https://learn.microsoft.com/en-us/training/modules/describe-features-tools-azure-for-governance-compliance/4-describe-purpose-resource-locks