Exam AZ-900 topic 1 question 232 discussion

definitely Perimeter layer: The perimeter layer uses distributed denial of service (DDoS) protection to filter large-scale attacks before they can cause a denial of service for users. The network layer limits communication between resources through segmentation and access controls. link: https://docs.microsoft.com/en-us/learn/modules/secure-network-connectivity-azure/2-what-is-defense-in-depth

"The perimeter layer uses distributed denial of service (DDoS) protection to filter large-scale attacks before they can cause a denial of service for users." https://docs.microsoft.com/en-us/learn/modules/secure-network-connectivity-azure/2-what-is-defense-in-depth

Perimeter Layer . According to MsLearn ~~~~ https://learn.microsoft.com/en-us/training/modules/describe-azure-identity-access-security/8-describe-defense-depth ...According to OSI model it is Network Layer

Azure DDoS Protection protects at layer 3 and layer 4 network layers. For web applications protection at layer 7, you need to add protection at the application layer using a WAF offering. For more information, see Application DDoS protection. https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview

Its network Layer https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview

Copilot => Perimeter Layer

Multi-Layered protection: When deployed with a web application firewall (WAF), Azure DDoS Protection protects both at the network layer (Layer 3 and 4, offered by Azure DDoS Protection) and at the application layer (Layer 7, offered by a WAF). WAF offerings include Azure Application Gateway WAF SKU and third-party web application firewall offerings available in the Azure Marketplace.

what is the correct answer? Can a moderator please confirm?

As per https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview, the Azure Distributed Denial of Service (DDoS) protection operates at the network layer (Layer 3 and Layer 4). So, Network layer is correct answer

Network for me: "Azure DDoS Protection protects at layer 3 and layer 4 network layers." https://learn.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview

Azure DDoS Protection is not specifically part of the perimeter layer. Instead, it operates at both layer 3 (network layer) and layer 4 (transport layer) to defend against volumetric and protocol attacks. For web applications, protection at layer 7 is achieved by adding a Web Application Firewall (WAF) offering

Perimeter layer

Perimeter is the right answer

The answer is wrong! The correct answer should be Perimeter. See this link for Defence in depth under "Perimeter": https://learn.microsoft.com/en-us/training/modules/describe-azure-identity-access-security/8-describe-defense-depth

Azure DDoS (Distributed Denial of Service) protection is implemented at the network layer. Specifically, it is designed to protect your Azure resources and applications from DDoS attacks by monitoring and mitigating malicious traffic at the network level before it reaches your virtual machines or services. This protection is deployed at Microsoft's global network edge, helping to safeguard your Azure assets from DDoS attacks that can overwhelm your network resources and disrupt your services. So, it primarily operates at the network perimeter to defend against DDoS threats.

its perimeter

It's called Perimeter for a reason...