Microsoft Certified: Azure Fundamentals (AZ-900) 2025 – 400 Free Practice Questions to Pass the Exam

Azure DDoS (Distributed Denial of Service) Protection is not automatically activated simply by installing Microsoft Threat Protection. Azure DDoS Protection is a separate service that must be explicitly enabled and configured for your Azure resources, primarily to safeguard them against DDoS attacks. This service provides enhanced protection by automatically detecting and mitigating DDoS attacks while utilizing Azure's global network.

Many organizations may have Threat Protection in place for their Microsoft services, but this does not translate to automatic DDoS protection for Azure resources. Each service has its own distinct setup requirements and configurations. Therefore, the assertion that Azure DDoS is activated automatically with Microsoft Threat Protection is false, making the correct answer B.