TANIUM CERTIFIED OPERATOR F KEY
CONCEPTS AND PRACTICE QUESTIONS
◉ What can you look into if you go to the software Inventory &
Usage tab?
Answer: - Vendor
- # of total products
- # of tracked products
- # of installations
- each product record shows usage amount, Versions. endpoints
◉ What are Product Actions for.
Answer: Actions are also available to configure parameters for a
product or enable/disable product usage reporting
◉ What is best practice with regards to duplicating reports?.
Answer: to review the purpose of the "new" report and update the
report as necessary.
◉ Where are assessments setup in Tanium?.
Answer: they are setup in Tanium Comply
,◉ What is Tanium Comply?.
Answer:
◉ What do assessments do?.
Answer: They are setup and configured to target and continuously
scan endpoints
◉ What are the rules inside of assessments called?.
Answer: Standards
◉ What are Assessment Standards in Tanium Comply?.
Answer: - these evaluate compliance,
- Can check for specific configurations Checks
- Check Values
- identify vulnerabilities
◉ What are findings in Tanium Comply?.
Answer: What is produced from the assessments. These can then be
filtered and grouped and then saved and exported.
◉ Use cases for Tanium Comply.
Answer: - continuous vulnerability scanning
,- Evaluate unmanaged devices
- Leverage industry standard benchmarks and compliance checks for
security policy auditing and gap analysis
◉ What is a setup in Tanium Comply?.
Answer: Manage scan engines, JRE's and other custom settings for
both compliance and vulnerability
◉ What are standards in Tanium comply?.
Answer: manage the library of standards used by assessments,
reports, and findings.
◉ How do you get to Assessments?.
Answer: Comply > Assessments
◉ What are the three options for creating a new assessment?.
Answer: - Compliance
- Vulnerability
- Remote Vulnerability
◉ What Scanning Engines are supported for use in assessments in
Tanium Comply?.
Answer: - CIS-CAT Pro
, - JovalICM/ Tanium Scanning Engine (TSE)
- SCAP Compliance Checker (SCC)
◉ What type of benchmark formats does comply support?.
Answer: SCAP 1.1 and SCAP 1.2
◉ What places can provide vulnerability definitions.
Answer: - CIS
- DISA
- OpenSCAP Security Guide
- USGCB
- NIST
- Red Hat
◉ What does the Tanium Vulnerability Library contain?.
Answer: OVAL vulnerability definitions. this library is updated every
24 hours
◉ What OS's are vulnerability reports available for?.
Answer: Windows, MAC OS, and Linux
◉ What does a Remote Vulnerability Report do?.
CONCEPTS AND PRACTICE QUESTIONS
◉ What can you look into if you go to the software Inventory &
Usage tab?
Answer: - Vendor
- # of total products
- # of tracked products
- # of installations
- each product record shows usage amount, Versions. endpoints
◉ What are Product Actions for.
Answer: Actions are also available to configure parameters for a
product or enable/disable product usage reporting
◉ What is best practice with regards to duplicating reports?.
Answer: to review the purpose of the "new" report and update the
report as necessary.
◉ Where are assessments setup in Tanium?.
Answer: they are setup in Tanium Comply
,◉ What is Tanium Comply?.
Answer:
◉ What do assessments do?.
Answer: They are setup and configured to target and continuously
scan endpoints
◉ What are the rules inside of assessments called?.
Answer: Standards
◉ What are Assessment Standards in Tanium Comply?.
Answer: - these evaluate compliance,
- Can check for specific configurations Checks
- Check Values
- identify vulnerabilities
◉ What are findings in Tanium Comply?.
Answer: What is produced from the assessments. These can then be
filtered and grouped and then saved and exported.
◉ Use cases for Tanium Comply.
Answer: - continuous vulnerability scanning
,- Evaluate unmanaged devices
- Leverage industry standard benchmarks and compliance checks for
security policy auditing and gap analysis
◉ What is a setup in Tanium Comply?.
Answer: Manage scan engines, JRE's and other custom settings for
both compliance and vulnerability
◉ What are standards in Tanium comply?.
Answer: manage the library of standards used by assessments,
reports, and findings.
◉ How do you get to Assessments?.
Answer: Comply > Assessments
◉ What are the three options for creating a new assessment?.
Answer: - Compliance
- Vulnerability
- Remote Vulnerability
◉ What Scanning Engines are supported for use in assessments in
Tanium Comply?.
Answer: - CIS-CAT Pro
, - JovalICM/ Tanium Scanning Engine (TSE)
- SCAP Compliance Checker (SCC)
◉ What type of benchmark formats does comply support?.
Answer: SCAP 1.1 and SCAP 1.2
◉ What places can provide vulnerability definitions.
Answer: - CIS
- DISA
- OpenSCAP Security Guide
- USGCB
- NIST
- Red Hat
◉ What does the Tanium Vulnerability Library contain?.
Answer: OVAL vulnerability definitions. this library is updated every
24 hours
◉ What OS's are vulnerability reports available for?.
Answer: Windows, MAC OS, and Linux
◉ What does a Remote Vulnerability Report do?.
