Associate Exam Questions & Correct
Answers Plus Rationales 2026 | Instant
Download Pdf.
1. A storage administrator is deploying Cohesity File and Object Services and needs to
ensure that the underlying physical storage is utilized efficiently across multiple
protocols. Which Cohesity construct is the fundamental, logical unit of storage that
defines capacity, performance policies, and data protection settings?
A) View
B) Share
C) Storage Domain
D) Node
Answer: C) Storage Domain
Rationale: A Storage Domain is the primary logical container for storage on a Cohesity
cluster. It abstracts the physical hardware and allows administrators to set policies for
replication, erasure coding, and performance (e.g., high-performance flash vs. capacity
tier). Views (file shares) and buckets (object) reside within a Storage Domain, inheriting
its policies.
2. During a Proof of Concept (POC), an engineer needs to present a file share to a Linux
client using the protocol that offers the best performance for POSIX-compliant
workloads. Which protocol should the engineer configure on the Cohesity View?
A) SMB 3.0
B) NFSv3
C) NFSv4.1
D) S3
,Answer: C) NFSv4.1
Rationale: While NFSv3 is common, NFSv4.1 provides significant advantages for
performance and parallelism, including session trunking (multipathing), improved
locking semantics, and better security. It is the recommended NFS protocol for
demanding Linux/UNIX workloads on Cohesity for optimal performance and feature
support.
3. A security team mandates that all data at rest must be encrypted to prevent physical
disk theft. Cohesity provides encryption at two levels. What is the encryption mechanism
that secures data on individual disks without requiring the cluster to be managed by an
external key manager?
A) Cluster-level encryption with KMS
B) Software-based per-file encryption
C) Native encryption using a cluster-generated passphrase
D) Network-level TLS encryption
Answer: C) Native encryption using a cluster-generated passphrase
Rationale: Cohesity offers native, built-in encryption where the cluster generates a
passphrase used to encrypt all data at rest. This is often called "encryption at rest" and
does not require an external Key Management System (KMS). For organizations
requiring centralized key management, integration with KMS (like AWS KMS or HyTrust)
is also available.
4. An organization wants to use Cohesity as a backup target for Veeam. They require a
high-performance, block-level storage interface that presents a logical unit number
(LUN) to the Veeam proxy. Which Cohesity capability fulfills this requirement?
A) Cohesity View
B) Cohesity Object (S3)
C) Cohesity SmartFiles
D) Cohesity Volumes
Answer: D) Cohesity Volumes
Rationale: Cohesity Volumes is the feature that provides block storage (iSCSI) services.
,It allows administrators to create LUNs that can be presented to external applications
like Veeam, Oracle, or SQL Server as block devices. Views are for file (NFS/SMB) and
Objects (S3) are for object storage.
5. A system architect is designing a solution for a remote office with limited IT staff.
They need to provide file services locally but manage the data protection centrally from
the main data center. What Cohesity feature allows a small cluster or node to be
managed as part of a larger global namespace?
A) Cohesity Data Fabric
B) Remote Office / Branch Office (ROBO) Edge Cluster
C) Cohesity Cloud Edition
D) Storage Domain Replication
Answer: B) Remote Office / Branch Office (ROBO) Edge Cluster
Rationale: ROBO Edge clusters are designed for remote or branch office deployments.
They are smaller, self-contained clusters that provide local file and object services. They
can be managed centrally from a primary cluster (or via Helios) and often replicate data
back to a central data center for long-term retention and disaster recovery, reducing the
WAN footprint.
6. An administrator is troubleshooting slow performance for an SMB share used by a
Windows user. The user reports that accessing a specific folder with thousands of PDF
files takes an unusually long time to list. Which Cohesity feature can be enabled on the
View to accelerate directory enumeration and metadata operations?
A) Inline Compression
B) Deduplication
C) View Acceleration (Metadata Caching)
D) SMB Multichannel
Answer: C) View Acceleration (Metadata Caching)
Rationale: View Acceleration is a feature that caches metadata (file names, sizes,
permissions) on the node where the client is connected. This dramatically reduces
latency for operations like directory listings (ls or dir) in directories with a high number
, of files, as the metadata does not have to be fetched from the underlying storage fabric
for every operation.
7. A company is migrating from a legacy NetApp filer to Cohesity. They have a strict
requirement to preserve Windows Access Control Lists (ACLs) and share-level
permissions during the migration. When creating a new View for SMB, which setting is
critical to ensure seamless migration of permissions?
A) Enable "Access-based enumeration"
B) Set the "SMB Owner" to a domain user
C) Configure the View to be "Domain-joined"
D) Enable "Opportunistic Locking"
Answer: C) Configure the View to be "Domain-joined"
Rationale: Joining the View to Active Directory (or a domain) is essential for SMB file
services. This allows Cohesity to use Active Directory for authentication and
authorization. It ensures that Windows ACLs (which contain SIDs of domain
users/groups) are interpreted correctly, allowing for a smooth migration where existing
permissions continue to function without being recreated.
8. What is the purpose of "Access-Based Enumeration" (ABE) on a Cohesity SMB View?
A) It compresses files to save space.
B) It hides files and folders from users who do not have permission to access them.
C) It provides a list of all files accessed by a specific user for auditing.
D) It allows users to restore previous versions of files.
Answer: B) It hides files and folders from users who do not have permission to
access them.
Rationale: Access-Based Enumeration is a security and usability feature. Without ABE, a
user might see a folder (e.g., "HR-Finance") but get an "access denied" error when trying
to open it. With ABE enabled, that folder is completely invisible to the user, reducing
clutter and the risk of users attempting to access restricted data.
9. An organization needs to store petabytes of unstructured data for analytics
workloads. They want to use an S3-compatible interface for their custom applications.