A company is currently planning to set up resources as part of its Azure subscription. They are looking at different security options that can be used to secure their Azure environment. 
Which of the following could be used for the following requirement? 
“Provide Protection against distributed denial of service attacks.”

Answer options:

A.Azure Key Vault
B.Azure Network Security Groups
C.Azure Multi-Factor Authentication
D.Azure DDoS Protection

Answer – D 
You can protect your environment from such attacks by using Azure DDoS Protection. 

Option A is incorrect since this is used to store secrets, certificates and keys. 
Option B is incorrect since this is used to restrict traffic into and out of Azure virtual machines. 
Option C is incorrect since this is used to provide an extra level of security during user authentication. 
For more information on the Azure DDoS protection service, please visit the below URL- 

https://azure.microsoft.com/en-us/services/ddos-protection/