AZ-500 Question #517: Real Exam Question with Answer & Explanation

The correct answer is E: VNet1, VNet2, and WebApp1. Although DDoS Protection Plan resources needs to be associated with a region, users can enable DDoS protection on Virtual Networks in different regions and across multiple subscriptions under a single Microsoft Entra tenant. https://learn.microsoft.com/en-us/azure/ddos-protection

Submitted by paula_co· Mar 6, 2026Secure networking

Question

You have an Azure subscription that contains the resources shown in the following table. You create an Azure DDoS Protection plan named DDoS1 in the West US Azure region. Which resources can you add to DDoS1?

Options

AVNetl1 only
BWebApp1 only
CVNet1 and VNet2 only
DVNet1 and WebApp1 only
EVNet1, VNet2, and WebApp1

Explanation

Although DDoS Protection Plan resources needs to be associated with a region, users can enable DDoS protection on Virtual Networks in different regions and across multiple subscriptions under a single Microsoft Entra tenant. https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection https://learn.microsoft.com/en-us/answers/questions/951433/how-to-protect-azure-webapp-from- denial-of-service

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice Browse All AZ-500 Questions