You need to configure an Azure solution that meets the following (AZ-900)

Correct answer: D) DDoS protection.
To secure websites from attacks and generate reports on attempted attacks, you should include Azure Web Application Firewall (WAF) in your solution. However, since Azure WAF is not listed among the options, the closest answer would be D) DDoS protection, as it is a type of protection that can help secure websites from certain types of attacks (Distributed Denial of Service attacks) and provide some level of reporting.

Azure Firewall (A) is a network security solution that can help protect networks, but it's not specifically designed for web application security. A Network Security Group (NSG) (B) is used to control inbound and outbound traffic to and from Azure resources, but it doesn't provide the same level of web application security as a WAF. Azure Information Protection (C) is used to protect sensitive information by applying encryption, access controls, and permissions, but it's not directly related to securing websites from attacks.