CompTIA PenTest+ (PT1-002) — Question 71

A company is concerned that its cloud service provider is not adequately protecting the VMs housing its software development. The VMs are housed in a datacenter with other companies sharing physical resources. Which of the following attack types is MOST concerning to the company?

Answer options

• A. Data flooding
• B. Session riding
• C. Cybersquatting
• D. Side channel

Correct answer: D

Explanation

The correct answer is D, Side channel, as it refers to attacks that exploit shared resources in a multi-tenant environment like cloud datacenters. The other options, such as Data flooding, Session riding, and Cybersquatting, do not directly relate to vulnerabilities arising from shared physical resources in cloud environments.