TANIUM ESSENTIALS EXAM 2025
QUESTIONS AND ANSWERS
Which Connect destination is exclusive to on-prem instances of Tanium - ANS File
Which of the following is NOT a use case for Trends - ANS Proactively identify endpoint
performance issues
Which element in Trends allows you to see endpoint data in a visual format (pie chart, for
example)? - ANS Panel
As a best practice, you should avoid scheduled connections that overlap - ANS True
Which of the following are chart types available within Trends? - ANS Donut, Area, Vertical
Bar
Which of the following is NOT a use case for Connect? - ANS Deploy actions to make changes
on endpoints, such as uninstalling a problematic application
Which of the following is NOT a use case for Enforce - ANS Detect endpoints with
unsanctioned customer data
What conditions must be defined when creating a Reveal rule? - ANS Pattern and Action
Impact scores appear in Threat Response to help prioritize remediation for alerts - ANS True
1 Copyright ©2025 FYNDLAY ALL RIGHTS RESERVED.
, After a remediation Enforce policy is created, it is enforced on a Filter Group - ANS False
Threat Engine can perform real-time detection and alerting using which of the following? -
ANS Signals
Regarding Impact, which of the following represents how far an attacker could move if an
account or asset were compromised? - ANS Outbound count
What does the shortest path represent in Impact? - ANS The quickest way to user rights or
endpoint access
In Map, endpoint maps work with MAC addresses and are fairly permanent visualization of your
environment - ANS False
In Direct Connect, you can terminate processes on an endpoint only if you are assigned one or
more of these roles or permissions - ANS Performance Kill Process
Performance Operator
Performance Administrator
In Patch, for Windows or Linux deployments, all patch files are delivered by Tanium -
ANS False
Select the state in Deploy that indicates the count of systems where one or more of the
previous versions of the application are detected, but the system requirements are not met -
ANS Update Ineligible
By default, _________ worth of data is retained in the endpoint database for Map, endpoint
maps, and application maps - ANS 24 hours'
Which steps can you perform when creating patch lists? - ANS You can create rules to
automatically select patches and add them to the list
2 Copyright ©2025 FYNDLAY ALL RIGHTS RESERVED.
QUESTIONS AND ANSWERS
Which Connect destination is exclusive to on-prem instances of Tanium - ANS File
Which of the following is NOT a use case for Trends - ANS Proactively identify endpoint
performance issues
Which element in Trends allows you to see endpoint data in a visual format (pie chart, for
example)? - ANS Panel
As a best practice, you should avoid scheduled connections that overlap - ANS True
Which of the following are chart types available within Trends? - ANS Donut, Area, Vertical
Bar
Which of the following is NOT a use case for Connect? - ANS Deploy actions to make changes
on endpoints, such as uninstalling a problematic application
Which of the following is NOT a use case for Enforce - ANS Detect endpoints with
unsanctioned customer data
What conditions must be defined when creating a Reveal rule? - ANS Pattern and Action
Impact scores appear in Threat Response to help prioritize remediation for alerts - ANS True
1 Copyright ©2025 FYNDLAY ALL RIGHTS RESERVED.
, After a remediation Enforce policy is created, it is enforced on a Filter Group - ANS False
Threat Engine can perform real-time detection and alerting using which of the following? -
ANS Signals
Regarding Impact, which of the following represents how far an attacker could move if an
account or asset were compromised? - ANS Outbound count
What does the shortest path represent in Impact? - ANS The quickest way to user rights or
endpoint access
In Map, endpoint maps work with MAC addresses and are fairly permanent visualization of your
environment - ANS False
In Direct Connect, you can terminate processes on an endpoint only if you are assigned one or
more of these roles or permissions - ANS Performance Kill Process
Performance Operator
Performance Administrator
In Patch, for Windows or Linux deployments, all patch files are delivered by Tanium -
ANS False
Select the state in Deploy that indicates the count of systems where one or more of the
previous versions of the application are detected, but the system requirements are not met -
ANS Update Ineligible
By default, _________ worth of data is retained in the endpoint database for Map, endpoint
maps, and application maps - ANS 24 hours'
Which steps can you perform when creating patch lists? - ANS You can create rules to
automatically select patches and add them to the list
2 Copyright ©2025 FYNDLAY ALL RIGHTS RESERVED.
