Yes, it is. The number of protected subdomains is not limited. If you choose to transfer a domain zone, a wildcard A record will be automatically created for all subdomains.
Tutorial: Transfer domain zone to the DDoS-Guard DNS servers
If you enable protection without transferring the domain zone, you will have to add an A record for each subdomain and point it to the protected IP address.
Tutorial: Activate protection by changing A records