diff --git a/preproduction-azure-pipelines.yml b/preproduction-azure-pipelines.yml
index 6a0e3a74141f..0f888ebbd851 100644
--- a/preproduction-azure-pipelines.yml
+++ b/preproduction-azure-pipelines.yml
@@ -13,6 +13,14 @@ variables:
 
 jobs:
 
+- job: "BranchProtection"
+  pool:
+    vmImage: 'Ubuntu 16.04'
+  condition: and(variables['PRIVATE'], eq(variables['System.PullRequest.TargetBranch'], 'master'))
+  steps:
+  - script: '>&2 echo "the branch is protected"'
+    failOnStderr: true
+
 - job: "Syntax"
   pool:
     vmImage: 'Ubuntu 16.04'