AZ-700 · Question #295
AZ-700 Question #295: Real Exam Question with Answer & Explanation
The correct answer is B: 2. Azure DDoS Network Protection plans are scoped to an Azure AD tenant. A single plan can protect virtual networks across multiple subscriptions within the same tenant at no extra per-VNet cost. However, if the subscriptions belong to two different Azure AD tenants, one plan cannot
Question
You have the Azure subscriptions shown in the following table. Each virtual network contains 20 internet-accessible resources that are assigned public IP addresses. You need to implement Azure DDoS Network Protection to protect the resources. The solution must minimize costs. What is the minimum number of DDoS Network Protection plans you should deploy?
Options
- A1
- B2
- C3
- D6
Explanation
Azure DDoS Network Protection plans are scoped to an Azure AD tenant. A single plan can protect virtual networks across multiple subscriptions within the same tenant at no extra per-VNet cost. However, if the subscriptions belong to two different Azure AD tenants, one plan cannot span both tenants-you need at least one plan per tenant. The table (not shown here) indicates subscriptions in two different tenants, making two plans the minimum. If all subscriptions shared one tenant, a single plan would suffice, so the answer of 2 confirms a two-tenant scenario.
Community Discussion
No community discussion yet for this question.