A company has just set up an Azure subscription and an Azure tenant. They want to implement strict policies when it comes to the security of Azure resources. They want to implement the following requirements. Ensure that the Virtual Machine Administrator team can only deploy virtual machines of a particular size.
Ensure that the Virtual Machine Administrator team can only deploy virtual machines and their dependent resources.
Ensure that no one can accidentally delete the virtual machines deployed by the Virtual Machine Administrator team.
Which of the following could be used to fulfill the below requirement? 
“Ensure that no one can accidentally delete the virtual machines deployed by the Virtual Machine Administrator team.”

Answer options:

A.Azure Role-Based Access Control
B.Azure Identity Protection
C.Azure Policies
D.Azure Locks

Answer – D 
This can be achieved with the help of Azure Locks. 
The Microsoft documentation mentions the following. 

Option A is incorrect since this is used to give authorization to use Azure resources. 
Option B is incorrect since this is used to protect Azure AD identities. 
Option C is incorrect since this is used to govern the resources in Azure. 
For more information on Azure Locks, please visit the below URL- 

https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-group-lock-resources