The company that Jayne works for has moved their web application infrastructure to a serverless model. Jayne’s security team has informed her that they believe the application is undergoing a large-scale resource exhaustion-based distributed denial-of-service attack. If the application is running in Microsoft’s serverless Azure environment, what is the most critical concern Jayne should have about the attack?

A large-scale denial-of-service attack that is using resources can be costly. Microsoft’s cloud will be able to scale to meet the demand, but Jayne’s organization may spend large amounts of money without benefiting any legitimate customers. Loss of data is unlikely because the application is being heavily used without any underlying issue for the application’s data. Log files will still be created, but the size and scale of the logs may drive cost. There is nothing in the scenario that demonstrates a vulnerability, and resource exhaustion attacks do not require a vulnerability to be successful.