Each tenant is isolated in their own lightweight virtualized environments (LVE) and given a predetermined amount of resources. If one customer suddenly get's a huge amount of traffic any ill effects will be contained to only that customer.
Once an account start hitting they limits, that specific account will start slowing down without effecting to other users.
If the account continue going over the limits for more time, the system will display temporary an error message (error 503) in his web site until the resource used by the account go down.