What is the difference between DDoS mitigation and DDoS protection?

DDoS protection refers to the proactive measures taken to prevent or reduce the impact of a DDoS attack, such as enabling DDoS Protection Standard. DDoS mitigation is the process of actively responding to an attack in progress to filter out malicious traffic and maintain service availability. Azure DDoS Protection provides both protection *and* mitigation capabilities.