You have an Azure subscription named Subscription$1$ that includes following resources:

A resource group named RG$1$

A virtual network named VNet$1$ in RG$1.$

A subnet named Subnet$1$ in VNet$1.$

Azure virtual machine named VM$1$ in RG$1.$ VM$1$ is connected to Subnet$1.$

You create an Azure DDoS protection plan named DDoSPlan$1$ in Subscription$1.$

You need to ensure that DDosPlan$1$ protects VM$1.$

Which resource should you add to DDoSPlan$1?$

Select only one answer.

RG$1$

Subnet$1$

Subscription$1$

VNet$1$