Cohesity COH350 - Cohesity Certified Security Specialist (CCSS) Exam
Page: 2 / 12
Total 58 questions
Question #6 (Topic: Exam A)
You need to enable secure remote archival of data from your primary Cohesity cluster, Cluster A. You plan to write to an offsite Cohesity cluster, Cluster B, configured as an S3 object store.
What is required in this scenario to ensure the minimum required access?
What is required in this scenario to ensure the minimum required access?
A. The Incoming Rule for S3 on Cluster A allows the specific IP addresses of Cluster B.
B. The External Target settings have Bandwidth Throttling enabled.
C. The Incoming Rule for S3 on Cluster B allows the specific IP addresses of Cluster A.
D. Cluster A can successfully communicate with helios.cohesity.com.
Answer: C
Question #7 (Topic: Exam A)
Your Cohesity cluster is configured with a single subnet. You are planning to protect a new group of critical VMs running on a new VMware ESXi. You want to ensure that the critical VMs backup traffic is completely isolated from other backup traffic.
In this scenario, which step should be performed to accomplish this task?
In this scenario, which step should be performed to accomplish this task?
A. Create a dedicated Protection Policy for these workloads.
B. Create a new dedicated VLAN on the Cohesity cluster.
C. Create an Incoming Firewall Rule on the Cohesity cluster.
D. Create a dedicated Storage Domain on the Cohesity cluster.
Answer: B
Question #8 (Topic: Exam A)
You are asked to restrict network access for external management traffic to your Cohesity cluster Web UI to only relevant hosts.
How would accomplish this task?
How would accomplish this task?
A. In the Management firewall rule, select Custom IP/Subnet and specify external management traffic IP addresses.
B. In the Cohesity CLI activate the Management firewall rule using the ~ iris_cli ip delete interface-name ~ command.
C. Within the Helios Dashboard, create an API key for all relevant management traffic.
D. In the default Management firewall rule, modify the Action to Deny.
Answer: A
Question #9 (Topic: Exam A)
A bad actor may attempt to intercept traffic between the Cohesity platform and an external target from a major cloud vendor.
Which two statements are correct in this scenario? (Choose two.)
Which two statements are correct in this scenario? (Choose two.)
A. The platform includes the access keys in the API request.
B. The platform uses TLS to encrypt in-flight data.
C. The platform establishes the connection to the external target only when making API calls for archive or recovery.
D. The platform can only store the data, metadata, and encryption keys in the external target.
Answer: BC
Question #10 (Topic: Exam A)
Your network security team explains that while backup and recovery traffic can flow over a dedicated secondary interface, they do not want users on this network to be able to access the Cohesity UI.
Which method would be used to accomplish this task?
Which method would be used to accomplish this task?
A. Ensure that no VIPs are configured on the secondary interface.
B. Ensure there is no gateway configured for the secondary interface.
C. Modify the default firewall rules to allow ports 80 and 443 on the primary interface.
D. Modify the default firewall rules to deny ports 80 and 443 on the secondary interface.
Answer: D
