Skip to Content

AZ-500: Which Azure Resources Can Be Added to DDoS Protection Plan?

Learn which Azure resources, including virtual networks, public IP addresses, and Resource Manager-deployed resources, can be associated with a DDoS Protection plan to safeguard against distributed denial-of-service attacks.

Table of Contents

Question

You have an Azure subscription that contains the resources shown in the following table.

Name Type Location
VNet1 Virtual network West US
VNet2 Virtual network East US
WebApp1 Web app West US

You create an Azure DDoS Protection plan named DDoS1 in the West US Azure region.

Which resources can you add to DDoS1?

A. VNetl1only
B. WebApp1 only
C. VNet1 and VNet2 only
D. VNet1 and WebApp1 only
E. VNet1, VNet2, and WebApp1

Answer

E. VNet1, VNet2, and WebApp1

Explanation

An Azure DDoS Protection plan can protect virtual networks, public IP addresses, and resources deployed through Azure Resource Manager. Therefore, you can associate the VNet1 and VNet2 virtual networks, as well as the WebApp1 web app, with the DDoS1 DDoS Protection plan, regardless of their locations within the same subscription.

Microsoft AZ-500 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Microsoft AZ-500 exam and earn Microsoft AZ-500 certification.