Microsoft Certified: Azure Fundamentals (AZ-900) Practice Exam

Which of the following would be good to put a resource lock on?

1. An ExpressRoute circuit with connectivity back to your on-premises network.

2. A non-production virtual machine used to test occasional application builds.

3. A storage account used to temporarily store images processed in a development environment.

4. A testing database with sensitive information.

The correct answer is: An ExpressRoute circuit with connectivity back to your on-premises network.

Placing a resource lock on an ExpressRoute circuit with connectivity back to your on-premises network is appropriate because it is a critical network resource that facilitates secure and private connections. Given that it links on-premises infrastructure to Azure services, maintaining its integrity and preventing accidental deletion or modification is essential for ensuring consistent and reliable connectivity. A resource lock helps safeguard such configurations, ensuring that essential networking functions remain intact, which is vital for operational continuity. In contrast, while other resources, such as virtual machines or testing databases, might benefit from protection, they are generally more flexible and can be recreated or are not as fundamental to the overall connectivity and security of your Azure environment as the ExpressRoute circuit. The storage account used for temporary image processing and the non-production virtual machine typically have less critical roles compared to the ExpressRoute, as they are part of a development workflow that can be modified or rebuilt with relative ease without significant impact on overall operations.