Exam AZ-500 topic 6 question 18 discussion

1: DDOS network protection 2: DDOS network protection https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-sku-comparison

1: DDOS network protection 2: DDOS network protection https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-sku-comparison

For "Provide access to DDoS rapid response support during active attacks", answer is DDos IP Protection Source : DDoS IP Protection contains the same core engineering features as DDoS Network Protection, but will differ in the following value-added services: DDoS rapid response support, cost protection, and discounts on WAF. https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview For "Protect Basic SKU public IP addresses.", answer is DDos Network Protection DDoS IP Protection is similar to Network Protection, but has the following additional limitation: Public IP Basic tier protection isn't supported. https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-sku-comparison

1.) DDOS network protection 2.) DDOS network protection

1: DDOS network protection 2: DDOS network protection answrs are very clear according to this link https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-sku-comparison DDoS rapid response support Not available Yes Public IP Basic tier protection No Yes

1 DDOS network protection2: DDOS network protection https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-sku-compariso

Both should be DDOS network protection. Check: https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-sku-comparison Feature DDoS IP Protection DDoS Network Protection Public IP Basic tier protection No Yes DDoS rapid response support Not available Yes

Public IP protection doesnt support in Basic Tier https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-sku-comparison#:~:text=Yes-,Public%20IP%20Basic%20tier%20protection,-No

Public IP Basic tier protection DDoS IP Protection->No || DDOS network protection -> Yes DDoS rapid response support DDoS IP Protection->Not available ||DDOS network protection -> Yes

N, N Feature DDoS IP Protection DDoS Network Protection Public IP Basic tier protection No Yes DDoS rapid response support Not available Yes

No, DDoS Network Protection is not the right answer for Basic SKU public IP. DDoS Network Protection is only available for Standard SKU public IP resources, such as Azure Virtual Machines, Azure Load Balancer Standard, Azure Application Gateway Standard v2, and Azure Firewall. Basic SKU public IP resources are not supported by DDoS Network Protection and cannot be added to a DDoS Protection plan. Therefore, to protect Basic SKU public IP resources, you need to use DDoS IP Protection, which is a new service that offers affordable and scalable protection for Basic SKU public IP resources.

Azure DDoS Protection is offered in two available SKUs, DDoS IP Protection and DDoS Network Protection. Public IP addresses are not supported in Basic tier protection. So answer is : 1: DDOS network protection 2: DDOS network protection

AI´s answer: Provide access to DDoS rapid response support during active attacks: DDoS Infrastructure Protection Protect Basic SKU public IP addresses: DDoS IP Protection Explanation: DDoS Infrastructure Protection provides access to DDoS rapid response support during active attacks. This service is specifically designed to mitigate and respond to DDoS attacks on the network infrastructure layer. DDoS IP Protection is used to protect public IP addresses, including Basic SKU public IP addresses, from DDoS attacks. It provides traffic monitoring and mitigation for the specific IP addresses associated with your resources. Therefore, for the given requirements, DDoS Infrastructure Protection should be used to provide access to DDoS rapid response support, while DDoS IP Protection should be used to protect Basic SKU public IP addresses.

1 - DDOS IP protection 2 - DDOS network protection