Cohesity COH350 - Cohesity Certified Security Specialist (CCSS) Exam
Page: 1 / 12
Total 58 questions
Question #1 (Topic: Exam A)
You have two interface groups configured on your Cohesity cluster: group 1 and group 2. You need to ensure that replication traffic is limited to group 2.
Which two steps would accomplish this task? (Choose two.)
Which two steps would accomplish this task? (Choose two.)
A. Configure the incoming application-based firewall to allow a replication profile for interface group 2.
B. Configure the outgoing application-based firewall to allow data protection profile for interface group 2.
C. Configure the firewall rules to deny outgoing traffic to interface group 1.
D. Configure the Client IPSet in the firewall rules to specify the address and subnet mask of the source network.
Answer: AB
Question #2 (Topic: Exam A)
Your network security team wants to restrict the ports that need to be opened on the network firewall for a newly installed Cohesity cluster.
Which statement is true in this scenario?
Which statement is true in this scenario?
A. Only the minimum required ports should be opened at all times.
B. All ports must be opened for incoming and outgoing traffic at all times.
C. Opening ports for the communication between the cluster and Helios SaaS is required at all times.
D. Node-to-node communication does not require opening ports at all times.
Answer: A
Question #3 (Topic: Exam A)
You need to configure a Cohesity View for database dumps. These database dumps will originate from a single database server. No other systems should have access to the View.
According to Cohesity, which action would be the required setup for this scenario?
According to Cohesity, which action would be the required setup for this scenario?
A. Update your global Allowlist to add the database server’s subnet.
B. Add a custom IP address to the management profile in the cluster firewall including the IP address of the database server.
C. Set the Override Global IP Allowlist for the Cohesity View to the IP address of the database server.
D. Modify your node host file entry to include a row with the IP address of the database server.
Answer: C
Question #4 (Topic: Exam A)
You want to restrict remote access for the IPMI of the Cohesity cluster nodes to only the data center facility technicians.
In this scenario, which action should be completed to accomplish this task?
In this scenario, which action should be completed to accomplish this task?
A. Create firewall rules for a single Cohesity node on the physical network equipment.
B. Create cluster-wide Firewall Incoming Rules in the Cohesity UI.
C. Create firewall rules for each Cohesity node on the physical network equipment.
D. Create cluster-wide iptable rules in the Cohesity UI.
Answer: C
Question #5 (Topic: Exam A)
You are installing a Cohesity cluster in a large enterprise environment. To satisfy compliance requirements, each department should have its own Cohesity Organization.
In this scenario, which step should be performed to ensure that each department has an isolated network?
In this scenario, which step should be performed to ensure that each department has an isolated network?
A. Assign a unique VXLAN to each Organization.
B. Assign a unique VLAN to each Organization.
C. Assign a unique VRF to each Organization.
D. Assign iptables rules to each Organization.
Answer: B
