Customers who move their applications to the cloud face the greatest security and availability concerns. DDoS attacks are designed to make an application unavailable to legitimate users by exhausting its resources. DDoS attacks can be launched at any endpoint that is accessible via the internet. All properties in Azure are protected by Azure's infrastructure DDoS protection (Basic), at no additional cost. The global deployment of Azure network offers protection against common network-layer attacks by providing scale and capacity. This is achieved through constant traffic monitoring and real time mitigation. DDoS Protection Basic does not require any user configuration or application modifications. DDoS Protection Basic helps protect all Azure services, including PaaS services like Azure DNS.