nerdexam
Microsoft

AZ-500 · Question #489

Drag and Drop Question You have an Azure subscription. You plan to implement Azure DDoS Protection. The solution must meet the following requirements: - Provide access to DDoS rapid response support…

The correct answer is DDoS Network Protection; DDoS Network Protection. DDoS Network Protection is the correct answer for both requirements. It is the only Azure DDoS Protection tier that includes access to the DDoS Rapid Response (DRR) team during active attacks, providing expert assistance and investigation. Additionally, DDoS Network Protection…

Submitted by haruto_sh· Mar 6, 2026Design and implement network security - specifically comparing Azure DDoS Protection tiers (Infrastructure, IP, and Network Protection) and their respective features, supported SKUs, and incident response capabilities (AZ-700 / AZ-500 / SC-100)

Question

Drag and Drop Question You have an Azure subscription. You plan to implement Azure DDoS Protection. The solution must meet the following requirements: - Provide access to DDoS rapid response support during active attacks. - Protect Basic SKU public IP addresses. You need to recommend which type of DDoS Protection to use for each requirement. What should you recommend? To answer, drag the appropriate DDoS Protection types to the correct requirements. Each DDoS Protection type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

Exhibit

AZ-500 question #489 exhibit

Answer Area

Drag items

DDoS Infrastructure protectionDDoS IP ProtectionDDoS Network Protection

Correct arrangement

  • DDoS Network Protection
  • DDoS Network Protection

Explanation

DDoS Network Protection is the correct answer for both requirements. It is the only Azure DDoS Protection tier that includes access to the DDoS Rapid Response (DRR) team during active attacks, providing expert assistance and investigation. Additionally, DDoS Network Protection is the only tier that protects Basic SKU public IP addresses (as well as Standard SKU), whereas DDoS IP Protection only covers Standard SKU public IP addresses and DDoS Infrastructure Protection provides no DRR support or Basic SKU coverage.

Topics

#Azure DDoS Protection#Network Security#Public IP SKUs#DDoS Rapid Response

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice