nerdexam
(ISC)2

CCSP · Question #88

A denial of service (DoS) attack can potentially impact all customers within a cloud environment with the continued allocation of additional resources. Which of the following can be useful for a…

The correct answer is B. Reservations. Resource reservations in a cloud environment ensure dedicated resources are available, protecting a customer from DoS attacks impacting shared resources.

Submitted by haruto_sh· Apr 18, 2026Cloud Platform & Infrastructure Security

Question

A denial of service (DoS) attack can potentially impact all customers within a cloud environment with the continued allocation of additional resources. Which of the following can be useful for a customer to protect themselves from a DoS attack against another customer?

Options

  • ALimits
  • BReservations
  • CShares
  • DBorrows

How the community answered

(58 responses)
  • A
    3% (2)
  • B
    79% (46)
  • C
    7% (4)
  • D
    10% (6)

Why each option

Resource reservations in a cloud environment ensure dedicated resources are available, protecting a customer from DoS attacks impacting shared resources.

ALimits

"Limits" typically restrict the maximum resources a customer can consume, which helps prevent one customer from consuming all resources, but doesn't guarantee a minimum for others in the face of a sustained attack unless those limits are very finely tuned and enforced for all customers.

BReservationsCorrect

Resource reservations in a cloud environment allow a customer to secure a guaranteed allocation of computing resources (e.g., CPU, memory, network bandwidth) for their services. This ensures that even if another customer's malicious activity or high demand (such as a DoS attack) causes resource exhaustion in the shared pool, the reserved resources for the protected customer remain available, preventing impact.

CShares

"Shares" typically refer to a proportional distribution of resources based on available capacity, meaning if total capacity is diminished by a DoS attack, the proportional share for other customers would also decrease.

DBorrows

"Borrows" is not a standard term for cloud resource allocation that provides DoS protection; it implies taking resources, which is the opposite of securing them.

Concept tested: Cloud resource isolation and protection

Source: https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/overview

Topics

#Cloud Resource Management#Multi-tenancy Security#DoS Protection#Resource Isolation

Community Discussion

No community discussion yet for this question.

Full CCSP Practice