CCSP · Question #88
A denial of service (DoS) attack can potentially impact all customers within a cloud environment with the continued allocation of additional resources. Which of the following can be useful for a…
The correct answer is B. Reservations. Resource reservations in a cloud environment ensure dedicated resources are available, protecting a customer from DoS attacks impacting shared resources.
Question
A denial of service (DoS) attack can potentially impact all customers within a cloud environment with the continued allocation of additional resources. Which of the following can be useful for a customer to protect themselves from a DoS attack against another customer?
Options
- ALimits
- BReservations
- CShares
- DBorrows
How the community answered
(58 responses)- A3% (2)
- B79% (46)
- C7% (4)
- D10% (6)
Why each option
Resource reservations in a cloud environment ensure dedicated resources are available, protecting a customer from DoS attacks impacting shared resources.
"Limits" typically restrict the maximum resources a customer can consume, which helps prevent one customer from consuming all resources, but doesn't guarantee a minimum for others in the face of a sustained attack unless those limits are very finely tuned and enforced for all customers.
Resource reservations in a cloud environment allow a customer to secure a guaranteed allocation of computing resources (e.g., CPU, memory, network bandwidth) for their services. This ensures that even if another customer's malicious activity or high demand (such as a DoS attack) causes resource exhaustion in the shared pool, the reserved resources for the protected customer remain available, preventing impact.
"Shares" typically refer to a proportional distribution of resources based on available capacity, meaning if total capacity is diminished by a DoS attack, the proportional share for other customers would also decrease.
"Borrows" is not a standard term for cloud resource allocation that provides DoS protection; it implies taking resources, which is the opposite of securing them.
Concept tested: Cloud resource isolation and protection
Source: https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/overview
Topics
Community Discussion
No community discussion yet for this question.