COH-285 Exam Dumps - Cohesity Protection Professional Questions and Answers

The correct answer is A. NetBackup deployment policies use VxUpdate, and VxUpdate relies on the NetBackup package repository located on the primary server. Cohesity documentation states that “VxUpdate uses a repository that resides on the primary server” and that the repository contains the packages that can be deployed to media servers and clients. It also explains that the packages referenced by deployment policies are verified and installed into that repository before use. In the deployment policy workflow, the administrator selects a package from the policy’s Package drop-down list; therefore, the package must already exist in the repository before the policy can run successfully. Cohesity explicitly notes that packages must be added to the VxUpdate repository before creating a working deployment policy, and policies without packages in the repository fail when run. Packages are not manually copied to every client, are not maintained in an external repository, and are not downloaded automatically from support at launch time. The administrator downloads or obtains the appropriate signed VxUpdate package, then adds it using the web UI or nbrepo -a. References/topics: Deployment Management, VxUpdate, Package Repository, and nbrepo repository management.

The correct permissions are View and Subscribe. In NetBackup RBAC, adding an asset to a Protection Plan is treated as subscribing the asset to that plan, not creating, updating, or managing the plan itself. Cohesity documentation describes the workflow as selecting one or more assets, clicking Add protection, choosing a protection plan, and clicking Protect; it also states that a single asset or group of assets can be subscribed to one or more protection plans. The RBAC permissions model separates plan administration from asset subscription. The role-permissions topic defines protection plans as the area used to manage how backups are performed with protection plans, while assets are managed separately under the Assets permission category. Official NetBackup RBAC guidance states that to add assets to a protection plan, the user requires View and Subscribe permissions on the protection plan, with corresponding asset permissions to view and protect the assets. Therefore, View and Subscribe is the permission pair directly aligned with adding an asset to a Protection Plan. References/topics: RBAC role permissions, Protection Plans, Subscribe an asset or asset group, and Workload asset protection workflow.

The correct log to review is nbpem, the NetBackup Policy Execution Manager log. Cohesity NetBackup documentation states that nbpem creates policy and client tasks and determines when jobs are run, and its logging location is install_path\NetBackup\logs\nbpem on Windows and /usr/openv/logs/nbpem on UNIX/Linux. In the scheduled backup workflow, nbpem initiates a backup when the job becomes due. It determines whether the policy, schedule, and backup window are valid, retrieves policy information through nbproxy, and then submits the due job to nbjm to obtain a job ID.

Therefore, when an automatic schedule does not launch a backup at the expected time, the first diagnostic focus is the scheduler and policy-evaluation component, not the later job-control or resource-allocation components. nbjm manages submitted jobs after nbpem hands them off, nbrb brokers resources, and nbemm manages media and device/resource database functions. Since the failure occurs before the job launches automatically, nbpem is the authoritative debug log for determining why the policy schedule did not trigger. Reference topics: Backup process, nbpem logging, and Policy Execution Manager scheduling behavior.