You must configure an Azure solution that meets these requirements: ✑ Protect websites from attacks ✑ Produce reports that detail attempted attacks. Which service should you include?

DDoS protection is the correct choice because it specifically defends against Distributed Denial of Service (DDoS) attacks, which are designed to overwhelm websites and make them unavailable. It also provides attack analytics and reports, fulfilling the requirement for detailing attempted attacks. Azure Firewall is a stateful firewall that filters traffic based on rules but doesn't inherently provide DDoS attack reporting. A network security group (NSG) filters network traffic at a more granular level (e.g., VM NICs or subnets) but lacks the advanced threat intelligence and reporting capabilities of DDoS protection. Azure Information Protection focuses on data classification and encryption, not network-level attack protection.