TCO: Questions & Step-by-Step Answers
What is the purpose of Tanium Benchmark? Correct Answer -
Benchmark is designed to assess enterprise risk in real time, compare against
peer benchmarks, and prioritize investigation and remediation efforts
What are the main use cases for Patch? Correct Answer - Tanium Patch
can be used to create patch lists, address zero-day vulnerabilities and report
on overall patch compliance
True or False: In a deploy software package, the system requirements for the
package to run on an endpoint include disk space required, minimum RAM,
architecture, and minimum operating system and version. Correct Answer -
True
Use the ______ tab to create and review notes written by you and your team,
about the investigation Correct Answer - Comments, this tab is used to
review all comments that have been left in the investigation. Includes a
stamps with author, date, time, and scope
What is a trigger condition used for within an Engage survey? Correct
Answer - A performance metric or indicator an endpoint must meet to
receive a survey
Which of the following is set up in Comply to target and continuously scan
endpoints to gather data? Correct Answer - Assessments. You must have
the Comply Report Administrator role to create assessments that use client-
based scanning
What access rights does a user have with indirect control? Correct Answer -
User has admin rights from groups. Impact analyzes both direct control and
indirect control when evaluating the potential movement of an endpoint, user,
or group
What are the use cases of Tanium Discover? Correct Answer - Find rogue
devices in the environment, find unmanaged endpoint, and label interfaces
lost if they haven't been managed in over 24 hours
, What is Provision's TaniumPXE service used for? Correct Answer - To
boot devices and host files needed for network provisioning
What type of architecture does the Tanium XEM Platform use? Correct
Answer - The Tanium XEM Platform uses a unique linear chain
architecture
What is the purpose of Tanium Satellite? Correct Answer - To designate
specific endpoint to run targeted, secure workloads on behalf of the Tanium
Platform or other solutions
True or False: In Asset, the key difference between views and reports is that
reports are optimized for programmatic integration, whereas views are
optimized for interactive viewing, sorting, and filtering Correct Answer -
False
Patterns can match sensitive information in unstructured data such as ______
Correct Answer - Word Documents. In addition to text files, PDFs, and
spreadsheets
Which page in the Performance module workbench provides a view of
performance metrics broken down by aspects such as Event Type and
Criticality Correct Answer - Performance Score. This graph displays
Memory, CPU, and App Crash Score data, which is a measure of the health of
the endpoints in your environment
What are some examples of a remediation policy? Correct Answer -
Change registry keys, Bitlocker Policy, Freeze and lockout are all examples of a
remediation policy
True or False: Tanium End-user Self Service allows users to preform self-
service software operations Correct Answer - True
Regarding Discover, what are the cons for the Level 2 Discovery Method?
Correct Answer - Can generate ICMP traffic and bad actors can "hide" from
these scans
What IM component is configured to annotate events or indicate that further
action is needed on an event? Correct Answer - Labels. Create rules to
What is the purpose of Tanium Benchmark? Correct Answer -
Benchmark is designed to assess enterprise risk in real time, compare against
peer benchmarks, and prioritize investigation and remediation efforts
What are the main use cases for Patch? Correct Answer - Tanium Patch
can be used to create patch lists, address zero-day vulnerabilities and report
on overall patch compliance
True or False: In a deploy software package, the system requirements for the
package to run on an endpoint include disk space required, minimum RAM,
architecture, and minimum operating system and version. Correct Answer -
True
Use the ______ tab to create and review notes written by you and your team,
about the investigation Correct Answer - Comments, this tab is used to
review all comments that have been left in the investigation. Includes a
stamps with author, date, time, and scope
What is a trigger condition used for within an Engage survey? Correct
Answer - A performance metric or indicator an endpoint must meet to
receive a survey
Which of the following is set up in Comply to target and continuously scan
endpoints to gather data? Correct Answer - Assessments. You must have
the Comply Report Administrator role to create assessments that use client-
based scanning
What access rights does a user have with indirect control? Correct Answer -
User has admin rights from groups. Impact analyzes both direct control and
indirect control when evaluating the potential movement of an endpoint, user,
or group
What are the use cases of Tanium Discover? Correct Answer - Find rogue
devices in the environment, find unmanaged endpoint, and label interfaces
lost if they haven't been managed in over 24 hours
, What is Provision's TaniumPXE service used for? Correct Answer - To
boot devices and host files needed for network provisioning
What type of architecture does the Tanium XEM Platform use? Correct
Answer - The Tanium XEM Platform uses a unique linear chain
architecture
What is the purpose of Tanium Satellite? Correct Answer - To designate
specific endpoint to run targeted, secure workloads on behalf of the Tanium
Platform or other solutions
True or False: In Asset, the key difference between views and reports is that
reports are optimized for programmatic integration, whereas views are
optimized for interactive viewing, sorting, and filtering Correct Answer -
False
Patterns can match sensitive information in unstructured data such as ______
Correct Answer - Word Documents. In addition to text files, PDFs, and
spreadsheets
Which page in the Performance module workbench provides a view of
performance metrics broken down by aspects such as Event Type and
Criticality Correct Answer - Performance Score. This graph displays
Memory, CPU, and App Crash Score data, which is a measure of the health of
the endpoints in your environment
What are some examples of a remediation policy? Correct Answer -
Change registry keys, Bitlocker Policy, Freeze and lockout are all examples of a
remediation policy
True or False: Tanium End-user Self Service allows users to preform self-
service software operations Correct Answer - True
Regarding Discover, what are the cons for the Level 2 Discovery Method?
Correct Answer - Can generate ICMP traffic and bad actors can "hide" from
these scans
What IM component is configured to annotate events or indicate that further
action is needed on an event? Correct Answer - Labels. Create rules to
