Cohesity COH350 - Cohesity Certified Security Specialist (CCSS) Exam
Page: 3 / 12
Total 58 questions
Question #11 (Topic: Exam A)
You are asked to ensure that a recently created NFS Cohesity View can only be accessed by a single IP address.
What is the configuration that should be applied in this scenario?
What is the configuration that should be applied in this scenario?
A. Create a Global Allowlist with netmask 0.0.0.0.
B. Create a Share Allowlist with netmask 255.255.255.255.
C. Create a View Allowlist with netmask 255.255.255.255.
D. Create a Global Allowlist with netmask 0.0.0.255.
Answer: C
Question #12 (Topic: Exam A)
You are performing security hardening actions on a newly deployed Cohesity cluster. You must ensure that an unauthorized person with IPMI access or someone physically connected to the servers cannot access the console.
Which action will accomplish this task?
Which action will accomplish this task?
A. Change the ~ support ~ password.
B. Change the IPMI password on all nodes.
C. Change Admin user account password on any node.
D. Change the ~ cohesity_console ~ user password.
Answer: D
Question #13 (Topic: Exam A)
You are deploying a new Cohesity cluster. You are asked to follow all documented procedures for hardening the system. You must ensure that someone with physical access cannot delete the data.
Which setting should be made on each Cohesity node to accomplish this task?
Which setting should be made on each Cohesity node to accomplish this task?
A. Configure a strong BIOS setup password on each node.
B. Disable the USB ports in the BIOS.
C. Configure the boot order in the BIOS to exclude Network Boot options.
D. Enable UEFI secure boot in the BIOS.
Answer: A
Question #14 (Topic: Exam A)
Upon your security review of the Cohesity platform, you determine that IPMI or the other remote maintenance tools may provide a saboteur with the necessary means of taking control of the server by loading a different boot image or, depending on the vendor, directly accessing disks.
In this scenario, what are two ways to prevent such attacks? (Choose two.)
In this scenario, what are two ways to prevent such attacks? (Choose two.)
A. Use network segregation.
B. Use a boot control password.
C. Use biometric authentication.
D. Change the support user password.
Answer: AB
Question #15 (Topic: Exam A)
Your organization wants to apply zero trust principles to protect completed backups, even from the most privileged data center personnel.
Which two actions will accomplish this task? (Choose two.)
Which two actions will accomplish this task? (Choose two.)
A. Ensure that sudo is disabled for the support user.
B. Add a Network Information Services provider.
C. Ensure that the server boot control password is unknown to the backup admin.
D. Set firewalls to prevent NFS access to the internal Cohesity file system.
Answer: AC
