yes, confirmed from our developer, 4 core license will do better than 2 core license when handling ddos.
p.s, you can upgrade/downgrade between 1/2/4/8-CPU license at anytime yourself in our store's client area, to choose the license which is best suitable for your current traffic, load etc. The serial no is same one.