Tanium essentials 2025
What is the purpose of Tanium Direct Connect? Select all that apply - answer1)To
provide a secure communication channel between the Tanium service and specific
endpoints. 2) To provide access to log files and other troubleshooting artifacts on
endpoints
When looking for insecure certificates, which of the following does Certificate Manager
provide insight into? (Select all that apply) - answer1) Wildcard certificates. 2) Short
Keys. 3) Self-signed certificates
What is the purpose of Tanium Discover? - answerFind unmanaged devices and bring
them under control
Patterns can match sensitive information in unstructured data such as _____. -
answerWord documents
Which Integrity Monitor statement is incorrect? - answerAlongside connect, send events
to enforce
What are key use cases of the Tanium Provision module? - answer1) To perform in-
place os refreshes. 2) To install operating systems on bare metal.
Which of the following is not a use case for Engage? - answerProduce events when
performance thresholds are exceeded
Within a Performance rule's blocks, events are joined by a Boolean AND (an event is
reported if all conditions in the block are true). Between blocks, events are joined by a
Boolean OR (an event is reported if any of the events are true). - answerTrue
Which of these is not an example of a remediation policy? - answerFirewall Policy
What is the function of the Tanium Interact module? - answerIt allows you to ask
questions about your environment in real time
Which of the following is not a use case for Asset? - answerAnalyze risk impact of
software and changes in the enviroment
Which of the following are valid situations to use the Distributed scanning profile in
Discover? Select all that apply. - answer1) Scanning from endpoints running the Tanium
Client. 2) Scanning with ping or nmap
, In a Deploy software package, the system requirements for the package to run on an
endpoint include disk space required, minimum RAM, architecture, and minimum
operating system and version. - answerTrue
Detection can perform real-time detection and alerting using which of the following? -
answerSignals
Which of the following is not a use case for Impact? - answerGain full visibility to the
environment and deliver software at speed and scale
Tanium End-user Self Service allows users to perform self-service software operations.
- answerTrue
Use the _________ tab to create and review notes written by you and your team, about
the investigation. - answerComments
In Patch, when new patches are included in a patch list, due to rule matching, this does
not mean a new version of the list is created. - answerTrue
What is the purpose of the Benchmark dashboards? - answerTo provide views into your
company's endpoint risk
Which of the following is set up in Comply to target and continuously scan endpoints to
gather data? - answerAssessments
Which of the following are benefits of the Tanium XEM Platform's architecture? -
answer1) it can self-heal as endpoints go offline. 2) It significantly reduces WAN traffic.
3) It does not require relay servers
Which assessment type checks the security configuration compliance state of a group
of endpoints, on a set schedule? - answerCompliance
Which of the following is not a use case for Threat Response? - answerFind root cause
of excessive administrative rights
What is the purpose of Tanium Benchmark? Select all that apply. - answer1)To access
the risk across all Tanium-supported devices in real time 2) To compare against real-
world benchmarks metrics from industry peers 3) To prioritize investigation and
remediation efforts
Which of the following is not a use case for Discover? - answerSending inventory
information to Splunk for correlation with security events
Regarding Discover, which of the following is a con for the Level 2 Discovery Method?
Select all that apply. - answer1) Generates ICMP traffic 2) Bad actors can "hide" from
these scans
What is the purpose of Tanium Direct Connect? Select all that apply - answer1)To
provide a secure communication channel between the Tanium service and specific
endpoints. 2) To provide access to log files and other troubleshooting artifacts on
endpoints
When looking for insecure certificates, which of the following does Certificate Manager
provide insight into? (Select all that apply) - answer1) Wildcard certificates. 2) Short
Keys. 3) Self-signed certificates
What is the purpose of Tanium Discover? - answerFind unmanaged devices and bring
them under control
Patterns can match sensitive information in unstructured data such as _____. -
answerWord documents
Which Integrity Monitor statement is incorrect? - answerAlongside connect, send events
to enforce
What are key use cases of the Tanium Provision module? - answer1) To perform in-
place os refreshes. 2) To install operating systems on bare metal.
Which of the following is not a use case for Engage? - answerProduce events when
performance thresholds are exceeded
Within a Performance rule's blocks, events are joined by a Boolean AND (an event is
reported if all conditions in the block are true). Between blocks, events are joined by a
Boolean OR (an event is reported if any of the events are true). - answerTrue
Which of these is not an example of a remediation policy? - answerFirewall Policy
What is the function of the Tanium Interact module? - answerIt allows you to ask
questions about your environment in real time
Which of the following is not a use case for Asset? - answerAnalyze risk impact of
software and changes in the enviroment
Which of the following are valid situations to use the Distributed scanning profile in
Discover? Select all that apply. - answer1) Scanning from endpoints running the Tanium
Client. 2) Scanning with ping or nmap
, In a Deploy software package, the system requirements for the package to run on an
endpoint include disk space required, minimum RAM, architecture, and minimum
operating system and version. - answerTrue
Detection can perform real-time detection and alerting using which of the following? -
answerSignals
Which of the following is not a use case for Impact? - answerGain full visibility to the
environment and deliver software at speed and scale
Tanium End-user Self Service allows users to perform self-service software operations.
- answerTrue
Use the _________ tab to create and review notes written by you and your team, about
the investigation. - answerComments
In Patch, when new patches are included in a patch list, due to rule matching, this does
not mean a new version of the list is created. - answerTrue
What is the purpose of the Benchmark dashboards? - answerTo provide views into your
company's endpoint risk
Which of the following is set up in Comply to target and continuously scan endpoints to
gather data? - answerAssessments
Which of the following are benefits of the Tanium XEM Platform's architecture? -
answer1) it can self-heal as endpoints go offline. 2) It significantly reduces WAN traffic.
3) It does not require relay servers
Which assessment type checks the security configuration compliance state of a group
of endpoints, on a set schedule? - answerCompliance
Which of the following is not a use case for Threat Response? - answerFind root cause
of excessive administrative rights
What is the purpose of Tanium Benchmark? Select all that apply. - answer1)To access
the risk across all Tanium-supported devices in real time 2) To compare against real-
world benchmarks metrics from industry peers 3) To prioritize investigation and
remediation efforts
Which of the following is not a use case for Discover? - answerSending inventory
information to Splunk for correlation with security events
Regarding Discover, which of the following is a con for the Level 2 Discovery Method?
Select all that apply. - answer1) Generates ICMP traffic 2) Bad actors can "hide" from
these scans
