Query: virtual_network_ddos_protection_status

select
  ddos,
  count(*)
from (
  select
    case when enable_ddos_protection then 'enabled'
    else 'disabled'
    end ddos
  from
    azure_virtual_network) as n
group by
  ddos
order by
  ddos;