Question

Your company runs a critical SQL database on an Azure virtual machine in the production resource group. Several administrators have contributor access to this resource group. You need to ensure that no one can accidentally delete the virtual machine, while still allowing administrators to modify its configuration. What should you implement?

Accepted Answer

Apply a CanNotDelete resource lock to the virtual machine

Answer

Apply a ReadOnly resource lock to the virtual machine

Answer

Assign an Azure Policy that denies delete operations

Answer

Remove Contributor access and assign the Reader role to all administrators