A company hosts a public-facing web application on Azure virtual machines behind a public IP address. During a recent event, the application became unreachable because it was flooded with a massive volume of traffic from thousands of sources, overwhelming the network bandwidth. Which Azure service is specifically designed to detect and mitigate this type of volumetric network attack?