CCSK · Question #121
What is it called when a customer's information and/or processes are compromised by the actions of another customer in a multi-tenancy environment?
The correct answer is E. Isolation failure. ISOLATION FAILURE: multi-tenancy and shared resources are defining characteristics of cloud computing. This risk category covers the failure of mechanisms separating storage, memory, routing and even reputation between different tenants (e.g., so-called guest-hopping attacks)…
Question
What is it called when a customer's information and/or processes are compromised by the actions of another customer in a multi-tenancy environment?
Options
- AInformation leakage
- BData loss
- CFailure to thrive
- DRelationship failure
- EIsolation failure
How the community answered
(42 responses)- A2% (1)
- B7% (3)
- C2% (1)
- D12% (5)
- E76% (32)
Explanation
ISOLATION FAILURE: multi-tenancy and shared resources are defining characteristics of cloud computing. This risk category covers the failure of mechanisms separating storage, memory, routing and even reputation between different tenants (e.g., so-called guest-hopping attacks). However it should be considered that attacks on resource isolation mechanisms (e.g.,. against hypervisors) are still less numerous and much more difficult for an attacker to put in practice compared to attacks on traditional OSs.
Topics
Community Discussion
No community discussion yet for this question.