You have a resource group that contains business critical resources, such as a CosmosDB, a virtual network, virtual machines, and storage accounts.

You want to make sure nobody can delete any of the resources in this group.

Which approach would be best for this scenario?

Apply a Read$-$Only lock on the resource group

Apply a Delete lock on every resource in the group

Apply a Delete lock on the resource group

Apply a Read$-$Only lock on every resource in the group