Tanium Essentials Set
Tanium Asset - answer-Collects asset data on an ongoing basis
-this is then exported to an external database such as a configuration management
database (optional)
- Tanium asset then sends reports via email.
Tanium Asset Use Case? - answerto collect a updated list of hardware and software
throughout the enterprise network.
- ability to inventory all online clients once per hour with 50k or less machines.
- ability to link to programs like ServiceNow and CMDB data
- ability to report complete list of information of software including the name, vendor,
version, and number of installed instances.
Reports - answerView predefined reports or create and configure custom reports based
on specific needs
Views - answerCreate Filtered versions of asset data, used for exporting to destinations
outside of tanium
Inventory Management - answerSchedule and manage the importing and exporting of
asset data
Software Inventory & usage - answerManage the tracking of software vendors and
product information installations, versions and usage details.
What type of asset data is stored for Reports? - answer- installed software
- virtual machines
- Primary user per machine
- hardware associated with specific department users.
Entities And Attributes - answerdetermine what data is populated in an asset
What do you need to export data to Flexera FNMS - answer- Access to connect with
user role
-connect 4.3.0 or later
-tanium admin privileges
- have a sql server staging the Flexera data
,How do you get to Software Inventory & Usage? - answerAsset > Software & Usage >
All Products
What is the benifit of integrating Tanium Asset and ServiceNow? - answerTaniums
inventory data for all managed devices, while Service now provides network device
inventory for data center components that cannot run Tanium. This reduces the amount
of ServiceNow midservers.
What does ServiceNow cover? - answerDiscovers network devices, storage arrays, and
non-endpoint data
What does Flexera FNMS cover? - answer-XenAoo ACL information
- oracle databases
- LPAR Details
- PVU Consumptions
- Hyper-V and Solaris
What can you look into if you go to the software Inventory & Usage tab? - answer-
Vendor
- # of total products
- # of tracked products
- # of installations
- each product record shows usage amount, Versions. endpoints
What are Product Actions for? - answerActions are also available to configure
parameters for a product or enable/disable product usage reporting
What is best practice with regards to duplicating reports? - answerto review the purpose
of the "new" report and update the report as necessary.
Where are assessments setup in Tanium? - answerthey are setup in Tanium Comply
What is Tanium Comply? - answer
What do assessments do? - answerThey are setup and configured to target and
continuously scan endpoints
What are the rules inside of assessments called? - answerStandards
What are Assessment Standards in Tanium Comply? - answer- these evaluate
compliance,
- Can check for specific configurations Checks
- Check Values
- identify vulnerabilities
, What are findings in Tanium Comply? - answerWhat is produced from the assessments.
These can then be filtered and grouped and then saved and exported.
Use cases for Tanium Comply - answer- continuous vulnerability scanning
- Evaluate unmanaged devices
- Leverage industry standard benchmarks and compliance checks for security policy
auditing and gap analysis
What is a setup in Tanium Comply? - answerManage scan engines, JRE's and other
custom settings for both compliance and vulnerability
What are standards in Tanium comply? - answermanage the library of standards used
by assessments, reports, and findings.
How do you get to Assessments? - answerComply > Assessments
What are the three options for creating a new assessment? - answer- Compliance
- Vulnerability
- Remote Vulnerability
What Scanning Engines are supported for use in assessments in Tanium Comply? -
answer- CIS-CAT Pro
- JovalICM/ Tanium Scanning Engine (TSE)
- SCAP Compliance Checker (SCC)
What type of benchmark formats does comply support? - answerSCAP 1.1 and SCAP
1.2
What places can provide vulnerability definitions - answer- CIS
- DISA
- OpenSCAP Security Guide
- USGCB
- NIST
- Red Hat
What does the Tanium Vulnerability Library contain? - answerOVAL vulnerability
definitions. this library is updated every 24 hours
What OS's are vulnerability reports available for? - answerWindows, MAC OS, and
Linux
What does a Remote Vulnerability Report do? - answerIt identifies vulnerabilities for
unmanaged devices on the enterprise network
What version of Discover is required to run the remote vulnerability report? -
answerDiscover 2.9.0
Tanium Asset - answer-Collects asset data on an ongoing basis
-this is then exported to an external database such as a configuration management
database (optional)
- Tanium asset then sends reports via email.
Tanium Asset Use Case? - answerto collect a updated list of hardware and software
throughout the enterprise network.
- ability to inventory all online clients once per hour with 50k or less machines.
- ability to link to programs like ServiceNow and CMDB data
- ability to report complete list of information of software including the name, vendor,
version, and number of installed instances.
Reports - answerView predefined reports or create and configure custom reports based
on specific needs
Views - answerCreate Filtered versions of asset data, used for exporting to destinations
outside of tanium
Inventory Management - answerSchedule and manage the importing and exporting of
asset data
Software Inventory & usage - answerManage the tracking of software vendors and
product information installations, versions and usage details.
What type of asset data is stored for Reports? - answer- installed software
- virtual machines
- Primary user per machine
- hardware associated with specific department users.
Entities And Attributes - answerdetermine what data is populated in an asset
What do you need to export data to Flexera FNMS - answer- Access to connect with
user role
-connect 4.3.0 or later
-tanium admin privileges
- have a sql server staging the Flexera data
,How do you get to Software Inventory & Usage? - answerAsset > Software & Usage >
All Products
What is the benifit of integrating Tanium Asset and ServiceNow? - answerTaniums
inventory data for all managed devices, while Service now provides network device
inventory for data center components that cannot run Tanium. This reduces the amount
of ServiceNow midservers.
What does ServiceNow cover? - answerDiscovers network devices, storage arrays, and
non-endpoint data
What does Flexera FNMS cover? - answer-XenAoo ACL information
- oracle databases
- LPAR Details
- PVU Consumptions
- Hyper-V and Solaris
What can you look into if you go to the software Inventory & Usage tab? - answer-
Vendor
- # of total products
- # of tracked products
- # of installations
- each product record shows usage amount, Versions. endpoints
What are Product Actions for? - answerActions are also available to configure
parameters for a product or enable/disable product usage reporting
What is best practice with regards to duplicating reports? - answerto review the purpose
of the "new" report and update the report as necessary.
Where are assessments setup in Tanium? - answerthey are setup in Tanium Comply
What is Tanium Comply? - answer
What do assessments do? - answerThey are setup and configured to target and
continuously scan endpoints
What are the rules inside of assessments called? - answerStandards
What are Assessment Standards in Tanium Comply? - answer- these evaluate
compliance,
- Can check for specific configurations Checks
- Check Values
- identify vulnerabilities
, What are findings in Tanium Comply? - answerWhat is produced from the assessments.
These can then be filtered and grouped and then saved and exported.
Use cases for Tanium Comply - answer- continuous vulnerability scanning
- Evaluate unmanaged devices
- Leverage industry standard benchmarks and compliance checks for security policy
auditing and gap analysis
What is a setup in Tanium Comply? - answerManage scan engines, JRE's and other
custom settings for both compliance and vulnerability
What are standards in Tanium comply? - answermanage the library of standards used
by assessments, reports, and findings.
How do you get to Assessments? - answerComply > Assessments
What are the three options for creating a new assessment? - answer- Compliance
- Vulnerability
- Remote Vulnerability
What Scanning Engines are supported for use in assessments in Tanium Comply? -
answer- CIS-CAT Pro
- JovalICM/ Tanium Scanning Engine (TSE)
- SCAP Compliance Checker (SCC)
What type of benchmark formats does comply support? - answerSCAP 1.1 and SCAP
1.2
What places can provide vulnerability definitions - answer- CIS
- DISA
- OpenSCAP Security Guide
- USGCB
- NIST
- Red Hat
What does the Tanium Vulnerability Library contain? - answerOVAL vulnerability
definitions. this library is updated every 24 hours
What OS's are vulnerability reports available for? - answerWindows, MAC OS, and
Linux
What does a Remote Vulnerability Report do? - answerIt identifies vulnerabilities for
unmanaged devices on the enterprise network
What version of Discover is required to run the remote vulnerability report? -
answerDiscover 2.9.0
