You have an Azure subscription that contains the resources shown in the following table. You create an Azure DDoS Protection plan named DDoS1 in the West US Azure region. Which resources can you add…

The correct answer is E. VNet1, VNet2, and WebApp1. Although DDoS Protection Plan resources needs to be associated with a region, users can enable DDoS protection on Virtual Networks in different regions and across multiple subscriptions under a single Microsoft Entra tenant…

Submitted by paula_co· Mar 6, 2026Secure networking

Question

You have an Azure subscription that contains the resources shown in the following table. You create an Azure DDoS Protection plan named DDoS1 in the West US Azure region. Which resources can you add to DDoS1?

Exhibits

Options

AVNetl1 only
BWebApp1 only
CVNet1 and VNet2 only
DVNet1 and WebApp1 only
EVNet1, VNet2, and WebApp1

How the community answered

(35 responses)

A
3% (1)
B
9% (3)
C
3% (1)
E
86% (30)

Explanation

Although DDoS Protection Plan resources needs to be associated with a region, users can enable DDoS protection on Virtual Networks in different regions and across multiple subscriptions under a single Microsoft Entra tenant. https://learn.microsoft.com/en-us/azure/ddos-protection/manage-ddos-protection https://learn.microsoft.com/en-us/answers/questions/951433/how-to-protect-azure-webapp-from- denial-of-service

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice