The city’s production resource group must not be deleted by accident, but administrators still need to update settings inside it. Which lock purpose fits?
Select an answer to reveal the explanation.
Short Explanation
CanNotDelete is the seatbelt for the whole production resource group: you can still tune things, but the delete key will not vaporize the group. ReadOnly is stricter—no changes at all. Tags are labels, not locks.
Full Explanation
A CanNotDelete resource lock prevents deletion of a resource or resource group while still permitting modifications. A ReadOnly lock is more restrictive and blocks changes as well as deletes. Tags do not enforce delete protection. Fundamentals candidates identify CanNotDelete when the goal is accidental-delete protection with continued management access.