On which resources can Azure DDoS Standard be enabled?

How does Azure DDoS Protection work?

When should we use Azure DDoS Standard?

Is Azure DDoS protection enabled by default?

What types of DDoS attacks does Azure protect against?