diff --git a/azure-pipelines.yml b/azure-pipelines.yml
index 3f863a2365ae..fdc2e18fd8e7 100644
--- a/azure-pipelines.yml
+++ b/azure-pipelines.yml
@@ -13,6 +13,14 @@ variables:
 
 jobs:
 
+- job: "BranchProtectionForPrivateRepo"
+  pool:
+    vmImage: 'Ubuntu 16.04'
+  condition: and(variables['PRIVATE'], eq(variables['System.PullRequest.TargetBranch'], 'master'))
+  steps:
+  - script: '>&2 echo "the branch is protected"'
+    failOnStderr: true
+
 - job: "Syntax"
   pool:
     vmImage: 'Ubuntu 16.04'