TANIUM ESSENTIALS STUDY GUIDE UPDATED QUESTIONS
AND ANSWERS GRADED A+
✔✔What are the 5 Applicability States? - ✔✔-Install Eligible
-Update Eligible
-Installed
-Update Ineligible
- Not Applicable
✔✔What does Install Eligible Notate? - ✔✔The count of the systems where the software
is not installed, and system requirements are met
✔✔What does Update Eligible Notate? - ✔✔the count of systems where one or more of
the previous versions of the application are detected and the software package can
install those updates
✔✔What does Installed notate? - ✔✔The Count of systems where the software package
is already installed
✔✔What does Update Ineligible notate in applicability reporting? - ✔✔The count of
systems where one or more previous application versions are detected but the system
requirements are not met by that machine.
✔✔What does not applicable notate in applicability reporting? - ✔✔The count of
computers where none of the requirements are met
✔✔What is a software bundle? - ✔✔a list that will be processed together in a
deployment and executed in sequence
✔✔What three things can you do with software bundles? - ✔✔-Deploy software
baselines to keep computers up to date
-replace applications
-resolve application dependencies
✔✔Tanium Maintenance Windows - ✔✔- allows you to manage installations on a
schedule
- Designate permitted times for targeted computer groups to run deployments
✔✔At a minimum how many maintenance windows do you need for deployments to
run? - ✔✔At least 1
✔✔What is the default end date of a maintenance window if it does not have an end
date? - ✔✔it does not have an end date if not specified
,✔✔How do you remove a maintenance window if you did not set an end date to it? -
✔✔One must remove the enforcement against the target computer groups to end it
✔✔How to create a deployment template - ✔✔1. Click deployment templates
2. click create deployment template
3. specify a name and description
4. select deployment options
5. click create deployment template
6. click yes
✔✔Tanium Discover - ✔✔this is the part of Tanium that allows it for find unmanaged
devices on the network
✔✔What are profiles in Tanium discover? - ✔✔you use profiles to define properties for
scanning the network
✔✔Interfaces - ✔✔View managed, unmanaged, unmanageable, labeled, and ignored
interfaces
✔✔Labels - ✔✔Group interfaces by various attributes through labeling
✔✔What are Locations in Tanium discover - ✔✔View discovered interfaces mapped by
subnets to geographic or physical locations
✔✔What are the two profile types? - ✔✔-Centralized
-Distributed
✔✔What does a Centralized profile type do? - ✔✔Use this for a network new to Tanium
scan from the Tanium module server
use for environments without any Tanium clients
✔✔What does a distributed profile type do? - ✔✔use this scan only for machines with
Tanium client and discover tools installed on them.
✔✔What is the scan window? - ✔✔The time you specify for profile scanning to occur,
remember to only set scan windows as necessary
✔✔What is a scan inclusion? - ✔✔this allows you to specify for specific network and
group scanning
✔✔Scan exclusions - ✔✔Allows for specific exclusions for broader scans that aren't as
specific.
, ✔✔What are labels in Tanium discover? - ✔✔Group interfaces by various attributes
such as organization or team
✔✔what does the lost interface label help identify? - ✔✔-interface last managed 24
hours ago
- last discovered in the last 4 hours using network scanning tools like NMAP, ARP, ping,
and connected
✔✔What are locations in Tanium discover? - ✔✔this can automatically categorize
interfaces based on the IP addresses into geographic and physical locations
- this is an added security feature because locations can be used to restrict interface
visibility with permissions for specific user groups
✔✔How do you showlocation information as a bar graph? - ✔✔Navigate to Discover >
interfaces
✔✔What is TCM? - ✔✔Tanium Client Management
✔✔What does TCM do? - ✔✔it is a shared services module that is easily imported to
the Tanium server
-allows for deployment of Tanium Client from TMS to any place on the network
✔✔Why is Tanium enforce beneficial to businesses? - ✔✔This allows for companies to
cut out other unnecessary third party security tools/services/apps
✔✔What are policies in enforce? - ✔✔this is where you create, import, and prioritize
policies
✔✔Enforcements - ✔✔this is where you can apply existing policies and check the status
of policy enforcement
✔✔Endpoint encryption - ✔✔View and manage recovery keys that have been backed
by enforce for biitlocker
✔✔anti-malware - ✔✔Check health of anti-malware and run scans to verify anti-
malware status
✔✔List of policies - ✔✔-manage a specific technology
- contains rules that are specific security controls
- Only one policy type can be applied to an endpoint
✔✔List of Enforcements - ✔✔-Apply policies to computer groups
- occur parodically with reoccurring saved actions
AND ANSWERS GRADED A+
✔✔What are the 5 Applicability States? - ✔✔-Install Eligible
-Update Eligible
-Installed
-Update Ineligible
- Not Applicable
✔✔What does Install Eligible Notate? - ✔✔The count of the systems where the software
is not installed, and system requirements are met
✔✔What does Update Eligible Notate? - ✔✔the count of systems where one or more of
the previous versions of the application are detected and the software package can
install those updates
✔✔What does Installed notate? - ✔✔The Count of systems where the software package
is already installed
✔✔What does Update Ineligible notate in applicability reporting? - ✔✔The count of
systems where one or more previous application versions are detected but the system
requirements are not met by that machine.
✔✔What does not applicable notate in applicability reporting? - ✔✔The count of
computers where none of the requirements are met
✔✔What is a software bundle? - ✔✔a list that will be processed together in a
deployment and executed in sequence
✔✔What three things can you do with software bundles? - ✔✔-Deploy software
baselines to keep computers up to date
-replace applications
-resolve application dependencies
✔✔Tanium Maintenance Windows - ✔✔- allows you to manage installations on a
schedule
- Designate permitted times for targeted computer groups to run deployments
✔✔At a minimum how many maintenance windows do you need for deployments to
run? - ✔✔At least 1
✔✔What is the default end date of a maintenance window if it does not have an end
date? - ✔✔it does not have an end date if not specified
,✔✔How do you remove a maintenance window if you did not set an end date to it? -
✔✔One must remove the enforcement against the target computer groups to end it
✔✔How to create a deployment template - ✔✔1. Click deployment templates
2. click create deployment template
3. specify a name and description
4. select deployment options
5. click create deployment template
6. click yes
✔✔Tanium Discover - ✔✔this is the part of Tanium that allows it for find unmanaged
devices on the network
✔✔What are profiles in Tanium discover? - ✔✔you use profiles to define properties for
scanning the network
✔✔Interfaces - ✔✔View managed, unmanaged, unmanageable, labeled, and ignored
interfaces
✔✔Labels - ✔✔Group interfaces by various attributes through labeling
✔✔What are Locations in Tanium discover - ✔✔View discovered interfaces mapped by
subnets to geographic or physical locations
✔✔What are the two profile types? - ✔✔-Centralized
-Distributed
✔✔What does a Centralized profile type do? - ✔✔Use this for a network new to Tanium
scan from the Tanium module server
use for environments without any Tanium clients
✔✔What does a distributed profile type do? - ✔✔use this scan only for machines with
Tanium client and discover tools installed on them.
✔✔What is the scan window? - ✔✔The time you specify for profile scanning to occur,
remember to only set scan windows as necessary
✔✔What is a scan inclusion? - ✔✔this allows you to specify for specific network and
group scanning
✔✔Scan exclusions - ✔✔Allows for specific exclusions for broader scans that aren't as
specific.
, ✔✔What are labels in Tanium discover? - ✔✔Group interfaces by various attributes
such as organization or team
✔✔what does the lost interface label help identify? - ✔✔-interface last managed 24
hours ago
- last discovered in the last 4 hours using network scanning tools like NMAP, ARP, ping,
and connected
✔✔What are locations in Tanium discover? - ✔✔this can automatically categorize
interfaces based on the IP addresses into geographic and physical locations
- this is an added security feature because locations can be used to restrict interface
visibility with permissions for specific user groups
✔✔How do you showlocation information as a bar graph? - ✔✔Navigate to Discover >
interfaces
✔✔What is TCM? - ✔✔Tanium Client Management
✔✔What does TCM do? - ✔✔it is a shared services module that is easily imported to
the Tanium server
-allows for deployment of Tanium Client from TMS to any place on the network
✔✔Why is Tanium enforce beneficial to businesses? - ✔✔This allows for companies to
cut out other unnecessary third party security tools/services/apps
✔✔What are policies in enforce? - ✔✔this is where you create, import, and prioritize
policies
✔✔Enforcements - ✔✔this is where you can apply existing policies and check the status
of policy enforcement
✔✔Endpoint encryption - ✔✔View and manage recovery keys that have been backed
by enforce for biitlocker
✔✔anti-malware - ✔✔Check health of anti-malware and run scans to verify anti-
malware status
✔✔List of policies - ✔✔-manage a specific technology
- contains rules that are specific security controls
- Only one policy type can be applied to an endpoint
✔✔List of Enforcements - ✔✔-Apply policies to computer groups
- occur parodically with reoccurring saved actions
