Tanium Essentials UPDATED Actual Exam
Questions and CORRECT Answers
Which Connect destination is exclusive to on-prem instances of Tanium - CORRECT
ANSWER✔✔- File
Which of the following is NOT a use case for Trends - CORRECT ANSWER✔✔-
Proactively identify endpoint performance issues
Which element in Trends allows you to see endpoint data in a visual format (pie chart, for
example)? - CORRECT ANSWER✔✔- Panel
As a best practice, you should avoid scheduled connections that overlap - CORRECT
ANSWER✔✔- True
Which of the following are chart types available within Trends? - CORRECT ANSWER✔✔-
Donut, Area, Vertical Bar
Which of the following is NOT a use case for Connect? - CORRECT ANSWER✔✔- Deploy
actions to make changes on endpoints, such as uninstalling a problematic application
Which of the following is NOT a use case for Enforce - CORRECT ANSWER✔✔- Detect
endpoints with unsanctioned customer data
What conditions must be defined when creating a Reveal rule? - CORRECT ANSWER✔✔-
Pattern and Action
Impact scores appear in Threat Response to help prioritize remediation for alerts - CORRECT
ANSWER✔✔- True
After a remediation Enforce policy is created, it is enforced on a Filter Group - CORRECT
ANSWER✔✔- False
, Threat Engine can perform real-time detection and alerting using which of the following? -
CORRECT ANSWER✔✔- Signals
Regarding Impact, which of the following represents how far an attacker could move if an
account or asset were compromised? - CORRECT ANSWER✔✔- Outbound count
What does the shortest path represent in Impact? - CORRECT ANSWER✔✔- The quickest
way to user rights or endpoint access
In Map, endpoint maps work with MAC addresses and are fairly permanent visualization of
your environment - CORRECT ANSWER✔✔- False
In Direct Connect, you can terminate processes on an endpoint only if you are assigned one
or more of these roles or permissions - CORRECT ANSWER✔✔- Performance Kill Process
Performance Operator
Performance Administrator
In Patch, for Windows or Linux deployments, all patch files are delivered by Tanium -
CORRECT ANSWER✔✔- False
Select the state in Deploy that indicates the count of systems where one or more of the
previous versions of the application are detected, but the system requirements are not met -
CORRECT ANSWER✔✔- Update Ineligible
By default, _________ worth of data is retained in the endpoint database for Map, endpoint
maps, and application maps - CORRECT ANSWER✔✔- 24 hours'
Which steps can you perform when creating patch lists? - CORRECT ANSWER✔✔- You
can create rules to automatically select patches and add them to the list
You can first specify the platform OS, choices included Windows and Linux
You can select from the list of available patches
Questions and CORRECT Answers
Which Connect destination is exclusive to on-prem instances of Tanium - CORRECT
ANSWER✔✔- File
Which of the following is NOT a use case for Trends - CORRECT ANSWER✔✔-
Proactively identify endpoint performance issues
Which element in Trends allows you to see endpoint data in a visual format (pie chart, for
example)? - CORRECT ANSWER✔✔- Panel
As a best practice, you should avoid scheduled connections that overlap - CORRECT
ANSWER✔✔- True
Which of the following are chart types available within Trends? - CORRECT ANSWER✔✔-
Donut, Area, Vertical Bar
Which of the following is NOT a use case for Connect? - CORRECT ANSWER✔✔- Deploy
actions to make changes on endpoints, such as uninstalling a problematic application
Which of the following is NOT a use case for Enforce - CORRECT ANSWER✔✔- Detect
endpoints with unsanctioned customer data
What conditions must be defined when creating a Reveal rule? - CORRECT ANSWER✔✔-
Pattern and Action
Impact scores appear in Threat Response to help prioritize remediation for alerts - CORRECT
ANSWER✔✔- True
After a remediation Enforce policy is created, it is enforced on a Filter Group - CORRECT
ANSWER✔✔- False
, Threat Engine can perform real-time detection and alerting using which of the following? -
CORRECT ANSWER✔✔- Signals
Regarding Impact, which of the following represents how far an attacker could move if an
account or asset were compromised? - CORRECT ANSWER✔✔- Outbound count
What does the shortest path represent in Impact? - CORRECT ANSWER✔✔- The quickest
way to user rights or endpoint access
In Map, endpoint maps work with MAC addresses and are fairly permanent visualization of
your environment - CORRECT ANSWER✔✔- False
In Direct Connect, you can terminate processes on an endpoint only if you are assigned one
or more of these roles or permissions - CORRECT ANSWER✔✔- Performance Kill Process
Performance Operator
Performance Administrator
In Patch, for Windows or Linux deployments, all patch files are delivered by Tanium -
CORRECT ANSWER✔✔- False
Select the state in Deploy that indicates the count of systems where one or more of the
previous versions of the application are detected, but the system requirements are not met -
CORRECT ANSWER✔✔- Update Ineligible
By default, _________ worth of data is retained in the endpoint database for Map, endpoint
maps, and application maps - CORRECT ANSWER✔✔- 24 hours'
Which steps can you perform when creating patch lists? - CORRECT ANSWER✔✔- You
can create rules to automatically select patches and add them to the list
You can first specify the platform OS, choices included Windows and Linux
You can select from the list of available patches
