CCSP Exam QuestionsBrowse all questions from this exam

CCSP Exam - Question 461


Because of multitenancy, specific risks in the public cloud that don't exist in the other cloud service models include all the following except:

Show Answer
Correct Answer: A

Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks are not unique to the public cloud model. These attacks can occur in any environment, whether it be public cloud, private cloud, or traditional on-premise infrastructure. Risks that are specific to multitenancy in the public cloud include information bleed, risk of loss or disclosure due to legal seizures, and escalation of privilege, as these arise from the shared resources and environments inherent to multitenancy.

Discussion

16 comments
Sign in to comment
prokopovra
Dec 31, 2020

Should be C . DDOS is not limited to the public cloud .

xaccan
Aug 31, 2021

Multitenant Environments: -Conflict of Interest -Escalation of Privilege -Information Bleed -Legal Activity the answer is Dos/DDOS

Buttersfolife
Dec 21, 2020

I'm not disagreeing with the answer, but escalation of privilege also exists in traditional environments. Escalation of privileges is a very standard phase of a pen test.

trying2pass
Jan 1, 2021

A.DDOS should be correct as DDOS is not a multitenancy related risk

wizzolo
Jun 4, 2021

C. the legal seizures can impact other customers in the cloud because of multitenancy, the solution is the encryption to avoid the problem. The DOS/DDOS could impact also in other kind of cloud

Zeezee2
Nov 22, 2021

Question asks for this if you translate it well: Which risk is not linked to public cloud due to multitenancy?

serget12
Oct 23, 2022

Poorly worded question.

a_vi
Apr 4, 2024

Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks are not risks specific to multitenancy in the public cloud. The other options, such as information bleed, risk of loss/disclosure due to legal seizures, and escalation of privilege, are risks associated with multitenancy in the public cloud environment.

akg001Option: C
May 23, 2022

C. Risk of loss/disclosure due to legal seizures

RollizoOption: A
Nov 18, 2022

Following the official guide, in multi tenant environments there is not DDoS in Multitenant environments. My sense says that DDoS is possible in all the models.

Alex_2169
Feb 13, 2023

it says except answer is A all other are multi-tenant "issues"

Pika26Option: D
May 22, 2023

D: Escalation of privilege

nalaikpanda
Oct 6, 2023

Answer is C. In normal envrionments a device being captured won't effect other tenents cox there are no tenants. its a risk experienced for all the tenants in cloud

TraceSpliceOption: D
Mar 27, 2024

D- Escalation of privilege

SivathOption: A
Nov 29, 2024

A. DoS/DDoS Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks are not specific to multitenancy or public cloud environments. These types of attacks can target any system connected to the internet, regardless of the underlying cloud model or multitenancy structure. They are a common threat across all types of networked environments.

MaciekMTOption: A
Feb 25, 2025

While Denial of Service (DoS) and Distributed Denial of Service (DDoS) attacks are a risk in any cloud environment, they are not specific to multitenancy in the public cloud. DoS/DDoS attacks target availability, affecting all cloud models, including public, private, hybrid, and community clouds. Public Cloud Multitenancy Risks: B. Information Bleed → Shared resources (e.g., memory, storage) could accidentally leak data between tenants. C. Risk of Loss/Disclosure Due to Legal Seizures → Data stored in a public cloud may be subject to legal actions against other tenants, resulting in potential data exposure or loss. D. Escalation of Privilege → If an attacker exploits a vulnerability in the cloud provider's infrastructure, they could gain elevated privileges, impacting multiple tenants.