What is the primary function of Azure DDoS Protection?

Correct answer: To mitigate Distributed Denial of Service attacks and maintain service availability

Azure DDoS Protection is designed specifically to detect and mitigate volumetric, protocol, and application-layer Distributed Denial of Service attacks, ensuring that legitimate traffic can still reach Azure-hosted services during an attack. Option D is correct because this service absorbs and scrubs attack traffic while maintaining availability for real users. Option A is incorrect because Azure DDoS Protection does not block all external connections; it selectively mitigates attack traffic while allowing legitimate traffic through. Option B is incorrect because user access token management is handled by Azure Active Directory and related identity services, not DDoS Protection. Option C is incorrect because password encryption is a function of identity and credential management services, not a DDoS mitigation product.