Exam SC-900 topic 1 question 76 discussion

Azure DDoS Protection Standard, combined with application design best practices, provides enhanced DDoS mitigation features to defend against DDoS attacks. It is automatically tuned to help protect your specific Azure resources in a virtual network. Protection is simple to enable on any new or existing virtual network, and it requires no application or resource changes. Since Azure Resources is not listed as part of the option, VIRTUAL NETWORK is the correct answer https://docs.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview

Got 1000. Answer is correct.

The answer is: virtual networks https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview

I think here is the key: Azure DDoS Protection protects at layer 3 and layer 4 network layers. For web applications protection at layer 7, you need to add protection at the application layer using a WAF offering. For more information, see Application DDoS protection.

VIRTUAL NETWORK

Correct answer because DDos protection is a type of protection that happens in the networking layer.

Correct - Virtual network.

Correct Answer.

I found this question in exam today but it is AZ-900!!!

Appeared in exam on 12/02/2022

CORRECT.

CORRECT

Technically answer should be all resources in a virtual network. as per the details mentioned in one of the feature i.e. Multi-Layered protection mentioned in the below link, directs the answer to be network layer protection (i.e. virtual network). https://docs.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview

DDOS HAPPENs on IP based identity, so virtual network is correct. But what is the purpose then we can say to secure the application or resources.

"Azure DDoS Protection is enabled at the Virtual Network level" https://azure.microsoft.com/en-gb/pricing/details/ddos-protection/

IMHO, both A and D are correct. But since only one answer can be given, I am in a quandary on how to answers in a real test. I guess I would take a 50/50 chance with D.

IMHO, both A and D are correct. But since only one answer can be given, I am in a quandary on how to answers in a real test. I guess I would take a 50/50 chance with D.