[&] Which of the following are valid locks? (select all that apply)
- Delete lock for a resource
- Delete lock for a resource group
- Read only lock for a resource
- Complete lock for a resource group

[&] You need to ensure that the following resources cannot be deleted:

```python
/subscriptions/{your subscription}/resourceGroups/production/providers/Microsoft.Compute/VMs/prod1
/subscriptions/{your subscription}/resourceGroups/production/providers/Microsoft.Compute/VMs/prod2
```

Which of the following approaches will meet the requirement with the least administrative effort?
- Apply one delete lock to the "production" resource group
- Apply one delete lock to both resources
- Apply one delete lock to the prod1 VM. Apply a second delete lock to the prod2 VM.
- Apply one delete lock to the Microsoft.Compute/VMs resource type