Q. A client application attempted to delete an API resource that is not allowed to be deleted. Which HTTP response code should be sent back?