Tanium Essentials – Questions With Proper Solutions
Which Connect destination is exclusive to on-prem instances of Tanium
Correct Answer - File
Which of the following is NOT a use case for Trends Correct Answer -
Proactively identify endpoint performance issues
Which element in Trends allows you to see endpoint data in a visual format
(pie chart, for example)? Correct Answer - Panel
As a best practice, you should avoid scheduled connections that overlap
Correct Answer - True
Which of the following are chart types available within Trends? Correct
Answer - Donut, Area, Vertical Bar
Which of the following is NOT a use case for Connect? Correct Answer -
Deploy actions to make changes on endpoints, such as uninstalling a
problematic application
Which of the following is NOT a use case for Enforce Correct Answer -
Detect endpoints with unsanctioned customer data
What conditions must be defined when creating a Reveal rule? Correct
Answer - Pattern and Action
Impact scores appear in Threat Response to help prioritize remediation for
alerts Correct Answer - True
After a remediation Enforce policy is created, it is enforced on a Filter Group
Correct Answer - False
Threat Engine can perform real-time detection and alerting using which of the
following? Correct Answer - Signals
, Regarding Impact, which of the following represents how far an attacker could
move if an account or asset were compromised? Correct Answer -
Outbound count
What does the shortest path represent in Impact? Correct Answer - The
quickest way to user rights or endpoint access
In Map, endpoint maps work with MAC addresses and are fairly permanent
visualization of your environment Correct Answer - False
In Direct Connect, you can terminate processes on an endpoint only if you are
assigned one or more of these roles or permissions Correct Answer -
Performance Kill Process
Performance Operator
Performance Administrator
In Patch, for Windows or Linux deployments, all patch files are delivered by
Tanium Correct Answer - False
Select the state in Deploy that indicates the count of systems where one or
more of the previous versions of the application are detected, but the system
requirements are not met Correct Answer - Update Ineligible
By default, _________ worth of data is retained in the endpoint database for Map,
endpoint maps, and application maps Correct Answer - 24 hours'
Which steps can you perform when creating patch lists? Correct Answer -
You can create rules to automatically select patches and add them to the list
You can first specify the platform OS, choices included Windows and Linux
You can select from the list of available patches
When creating a database source in Asset, a best practice is to set a primary
key field in the source table that maps to a unique field in Asset, like Serial
Number or Computer Name Correct Answer - True
Which feature is useful to help build complex Interact questions using a
guided graphical interface? Correct Answer - Question builder
Which Connect destination is exclusive to on-prem instances of Tanium
Correct Answer - File
Which of the following is NOT a use case for Trends Correct Answer -
Proactively identify endpoint performance issues
Which element in Trends allows you to see endpoint data in a visual format
(pie chart, for example)? Correct Answer - Panel
As a best practice, you should avoid scheduled connections that overlap
Correct Answer - True
Which of the following are chart types available within Trends? Correct
Answer - Donut, Area, Vertical Bar
Which of the following is NOT a use case for Connect? Correct Answer -
Deploy actions to make changes on endpoints, such as uninstalling a
problematic application
Which of the following is NOT a use case for Enforce Correct Answer -
Detect endpoints with unsanctioned customer data
What conditions must be defined when creating a Reveal rule? Correct
Answer - Pattern and Action
Impact scores appear in Threat Response to help prioritize remediation for
alerts Correct Answer - True
After a remediation Enforce policy is created, it is enforced on a Filter Group
Correct Answer - False
Threat Engine can perform real-time detection and alerting using which of the
following? Correct Answer - Signals
, Regarding Impact, which of the following represents how far an attacker could
move if an account or asset were compromised? Correct Answer -
Outbound count
What does the shortest path represent in Impact? Correct Answer - The
quickest way to user rights or endpoint access
In Map, endpoint maps work with MAC addresses and are fairly permanent
visualization of your environment Correct Answer - False
In Direct Connect, you can terminate processes on an endpoint only if you are
assigned one or more of these roles or permissions Correct Answer -
Performance Kill Process
Performance Operator
Performance Administrator
In Patch, for Windows or Linux deployments, all patch files are delivered by
Tanium Correct Answer - False
Select the state in Deploy that indicates the count of systems where one or
more of the previous versions of the application are detected, but the system
requirements are not met Correct Answer - Update Ineligible
By default, _________ worth of data is retained in the endpoint database for Map,
endpoint maps, and application maps Correct Answer - 24 hours'
Which steps can you perform when creating patch lists? Correct Answer -
You can create rules to automatically select patches and add them to the list
You can first specify the platform OS, choices included Windows and Linux
You can select from the list of available patches
When creating a database source in Asset, a best practice is to set a primary
key field in the source table that maps to a unique field in Asset, like Serial
Number or Computer Name Correct Answer - True
Which feature is useful to help build complex Interact questions using a
guided graphical interface? Correct Answer - Question builder
