This paper proposes a resilient and robust model predictive control (MPC) scheme for a class of Cyber-Physical Systems (CPS) subject to state and input constraints, unknown but bounded disturbances and Denial of Service (DoS) attacks. The attacker blocks the controller to actuator communication and the attacks are assumed to be time-limited. The control is designed by extending a robust tube-based MPC, where a new type of invariant set, namely µ-step Robust Positively Invariant (µ-RPI) set, is introduced to deal with resilience. A set-based method is then developed for the control scheme to ensure both resilience to DoS attacks while preserving robustness to bounded disturbances. A computational algorithm is derived and a numerical example is provided to illustrate the potential of the proposed approach.