AZ-900 Episode 24 | Azure DDoS Protection | Distributed Denial of Service

Microsoft Azure Fundamental full course.
Distributed Denial-of-Service attacks are one of the biggest security threats for publicly exposed applications. Today I'll explain what is Azure DDoS protection service and how does it mitigate this threat for customers.
Skills Learned
- Describe Azure DDoS Protection
🌐 Site: marczak.io/az-900/#ep24
Episode Resources
- 📚 Study cheat sheet marczak.io/az-900/episode-24/...
- 🧠 Practice Test marczak.io/az-900/episode-24/...
Study Guide
- Microsoft Learn: DDoS Protection docs.microsoft.com/en-us/lear...
- Microsoft Azure: DDoS Protection Overview azure.microsoft.com/en-us/ser...
Expand your knowledge - extra resources
- Microsoft Documentation: DDoS Protection docs.microsoft.com/en-us/azur...
Agenda
00:00 Episode introduction
00:21 What is DoS?
00:52 What is DDoS?
01:28 Azure DDoS Protection
02:05 DDoS Protection Standard Demo
03:10 Summary
Want to connect?
- Blog marczak.io/
- Twitter / marczakio
- Facebook / marczakio
- LinkedIn / adam-marczak
- Site azure4everyone.com

[@TheShambru]

Simply amazing Adam! #bigfan of your presentation and articulation skills.. had been through a couple dozen websites and youtube channels before I found yours and handsdown the best of best any Azure aspirant can get to 🙇 Thanks a lot Adam! You are a ⭐

[@AdamMarczakYT]

Awesome, thank you!

[@abhisheksoni6012]

Thank you so much Adam for making these difficult-to-grasp concepts very easy to understand and interesting to learn. There are no words for your teaching skills. You are awesome. Thanks a lot Adam !

[@davidtugyi4536]

Your are doing a great work Adam, keep it going ;) Cheers!

[@AdamMarczakYT]

Thanks a ton!

[@vilasborate4372]

Thank you So Much Adam for your course and it helped me to crack AZ-900 with 783 Score.

[@shividhun8675]

Thanks Adam! Really appreciate your efforts :)

[@AdamMarczakYT]

My pleasure!

[@miketholen6208]

Extra part for people watching this course: Azure DDoS Protection offers two types of DDoS protection services: Network Protection protects against volumetric attacks that target the network infrastructure. This type of protection is available for all Azure resources that are deployed in a virtual network. IP Protection protects against volumetric and protocol-based attacks that target specific public IP addresses. This type of protection is available for public IP addresses that are not deployed in a virtual network.

[@timmusaka9577]

You are the best Adam! Thank you

[@scotmarkieboy]

Hey Adam, thanks for putting this content together and making it available for free

[@AdamMarczakYT]

My pleasure!

[@naordaniel]

You are a genius, I love your content!!!

[@Annamalaibatsha]

Thanks for the great explanation as always

[@AdamMarczakYT]

My pleasure!

[@kochetovalex]

Thanks for this episode!

[@AdamMarczakYT]

No problem!

[@axmedrashid4826]

Thank you Adam very helpful

[@yuliyacher67]

Thank you!

[@AsharSiddiqui79]

My exam is Sat next week so I hope you can cover as much as you can please :) All your videos are very interesting and to the point!

[@AdamMarczakYT]

Thanks! Next week around 4 new episodes, that will net you at around 65-70% exam coverage. So just few hours extra study by reading and you are set to go :) best of luck!

[@AsharSiddiqui79]

@@AdamMarczakYT Passed my Exam 907 :-) Cheers Adam!

[@BDizzle1611]

Thanks dude!

[@kumarashutosh5975]

Great explanation adam

[@brijjain6444]

Great work Adam ! Love from India ..

[@AdamMarczakYT]

Thanks from Poland! :)

[@klausmikaelson632]

Man, You rock!

[@AdamMarczakYT]

Thanks Klaus :)

[@VijayKumar-id9vy]

It was simple and clear to understand, keep up the good job. The important thing that came across was ...Will Microsoft return the cost of its infrastructure? If the resource is protected with DDoS Protection Standard, any scale-out costs during a DDoS attack are covered and customers will get the cost credit back for those scaled-out resources..

[@AdamMarczakYT]

Yep. That sentence is from the docs on pricing. Reference with example scenarios: azure.microsoft.com/en-us/pricing/details/ddos-protection?WT.mc_id=AZ-MVP-5003556

[@indrajeet5000]

Thanks Adam

[@AdamMarczakYT]

my pleasure!

[@davidgates5189]

legend

[@fernandocarrillo1995]

Hi Adam! Excelent video, I have a question. Your here activate DDOS Plan Basic? or Standar?

[@AdamMarczakYT]

Standard, I forgot to turn it off and it consumed all of my monthly credits so watch out! It's not a cheap thing :) Basic is included in the services for free but you don't configure there anything. Thanks for watching :)

[@brusslee1814]

Since the azure ddos protection basic plan is automatically enabled for all azure services then that means when I go to the portal and create a new ddos protection resource like you did at 2:10 then that's always gonna be the standard plan?

[@fredericschmidt5734]

Hi Adam, very great episodes series, but a little mistake in the link for practice test for this episode, the url end with .md and off course a 404 error.. Thanxs for your work, it's very great and perfect.

[@AdamMarczakYT]

Fixed. Thanks :)

[@cemen777]

Hi Adam and thank you for this course. What would be your answer (as an Azure Guru) to the question: On which layer is DDoS protection applied? - Application layer - Network layer - Perimeter layer I think the correct answer is "Network layer". Am I correct? Thank you for your feedback.

[@felipemendoza8723]

azure ddos protection is for Layer 3/4 attacks (network and Transport layers) protecting public ip addresses of resources on your vnet.

[@nawanjanakotuwegedara7006]

How many episodes are there in the complete course? When will the complete course be available? Thank you for the support.

[@AdamMarczakYT]

To check out the episode list always check my website. I plan to finish the course in the next 8 weeks.

[@karthikbt7239]

How does the DDoS protector differentiate between legitimate traffic and malicious traffic? How does it identify which traffic is genuine request?

[@kotykarlsen7716]

i have wenet step-by-step with you and i don't have the protected resources in the settings tab

[@wadexyz]

If DDoS is automatically turned on for any publicly available resource, when would someone need to explicitly create a DDoS resource as you did in the demo?

[@AdamMarczakYT]

Demo was DDoS standard tier which does require manual setup. But all Azure services are protected by DDoS basic tier with no extra setup.

[@ave383]

I don't get how the resource group that says protected applies. It came out of nowhere. How is it relevant? What does it do? You created a separate resource group for the ddos service that was not named protected so how does this protected resource group pertain to the ddos resource group?

[@sandeepkarma5885]

Adam is there video for Azure-104

[@AdamMarczakYT]

Not yet, maybe in the future! :)

[@digiface]

Isnt it like 2k a month to protect a vnet?

[@nawanjanakotuwegedara7006]

Can i pass az-900 just by watching this videos list?

[@AdamMarczakYT]

Yep but I would recommend going through practice tests as well.

[@biokode]

[@ahmedebrahimn97]

Your are doing a great work Adam, keep it going ;) Cheers!

[@AdamMarczakYT]

Thanks! I appreciate it!