TANIUM ESSENTIALS EXAMS SCRIPT UPDATED
QUESTIONS AND ANSWERS GRADED A+
✔✔When creating a database source in Asset, a best practice is to set a primary key
field in the source table that maps to a unique field in Asset, like Serial Number or
Computer Name - ✔✔True
✔✔Which feature is useful to help build complex Interact questions using a guided
graphical interface? - ✔✔Question builder
✔✔Which of the following is NOT a use case for Interact? - ✔✔Remove unwanted
software
✔✔Which Interact result message indicates that the client is busy? - ✔✔Current result
unavailable
✔✔Which of the following is a key benefit of Tanium's Linear Chain architecture? -
✔✔Reduced WAN Traffic saves costs
✔✔Why does Tanium use zone servers? - ✔✔Adds and extra communication step for
security
✔✔Which of the following contains a set of instructions for altering an endpoint's
behavior? - ✔✔Package
✔✔Which of the following is set up in Comply to target and continuously scan endpoints
to gather data? - ✔✔Assessments
✔✔Which of the following is NOT a use case for impact? - ✔✔Gain full visibility to the
environment and deliver software at speed and scale
✔✔Reveal Quick Search is used to group rules together and assign them to specific
groups of endpoints - ✔✔False
✔✔Which account or groups would be analyzed by Impact - ✔✔Both Domain Users and
local Administrators
✔✔Signals and IOCs are types of Intel that Threat Response uses - ✔✔True
✔✔Which of the following is NOT a use case for Threat Response? - ✔✔Find root
cause of excessive administrative rights
, ✔✔Which of the following is NOT a use case for comply? - ✔✔Contain compromised
systems at scale
✔✔Which of the following is NOT a use case for deploy - ✔✔Satisfy PCI-DSS, CIS,
HIPAA, SOX
✔✔In Deploy software package, the system requirements for the package to run on an
endpoint include disk space required, minimum RAM, architecture, and minimum
operating systems and version? - ✔✔True
✔✔Which of the following is NOT a use case for Discover? - ✔✔Send inventory
information to Splunk for correlation with security events
✔✔Select the description that best fits the APPLICATION COMPONETS TAB on Map's
Application Discovery page - ✔✔Provides details about the processes hosting the
connections for each application component
✔✔What is the purpose of Tanium Discover? - ✔✔Find unmanaged devices and bring
them under control
✔✔To install Map tools on endpoints, the endpoints must ______. - ✔✔Be included in
the Map action group
✔✔In Asset, the key difference between views and reports is that reports are optimized
for programmatic integration, whereas views are optimized for interactive viewing,
sorting, and filtering - ✔✔False
✔✔Basic Interact questions are compromised of which two fundamental parts? -
✔✔Data to be collected; Devices to answer
✔✔Identify which item is a Connect destination? - ✔✔Splunk
✔✔What is a "source" in the context of the Trends module? - ✔✔A collection of sensors
that define a saved question
✔✔Which of the following is NOT a use case for Impact? - ✔✔Gain full visibility to the
environment and deliver software at speed and scale
✔✔Which of the following is NOT a use case for Integrity Monitor? - ✔✔Harden specific
assets against lateral attack
✔✔Comply findings can be exported by using Tanium Connect - ✔✔True
QUESTIONS AND ANSWERS GRADED A+
✔✔When creating a database source in Asset, a best practice is to set a primary key
field in the source table that maps to a unique field in Asset, like Serial Number or
Computer Name - ✔✔True
✔✔Which feature is useful to help build complex Interact questions using a guided
graphical interface? - ✔✔Question builder
✔✔Which of the following is NOT a use case for Interact? - ✔✔Remove unwanted
software
✔✔Which Interact result message indicates that the client is busy? - ✔✔Current result
unavailable
✔✔Which of the following is a key benefit of Tanium's Linear Chain architecture? -
✔✔Reduced WAN Traffic saves costs
✔✔Why does Tanium use zone servers? - ✔✔Adds and extra communication step for
security
✔✔Which of the following contains a set of instructions for altering an endpoint's
behavior? - ✔✔Package
✔✔Which of the following is set up in Comply to target and continuously scan endpoints
to gather data? - ✔✔Assessments
✔✔Which of the following is NOT a use case for impact? - ✔✔Gain full visibility to the
environment and deliver software at speed and scale
✔✔Reveal Quick Search is used to group rules together and assign them to specific
groups of endpoints - ✔✔False
✔✔Which account or groups would be analyzed by Impact - ✔✔Both Domain Users and
local Administrators
✔✔Signals and IOCs are types of Intel that Threat Response uses - ✔✔True
✔✔Which of the following is NOT a use case for Threat Response? - ✔✔Find root
cause of excessive administrative rights
, ✔✔Which of the following is NOT a use case for comply? - ✔✔Contain compromised
systems at scale
✔✔Which of the following is NOT a use case for deploy - ✔✔Satisfy PCI-DSS, CIS,
HIPAA, SOX
✔✔In Deploy software package, the system requirements for the package to run on an
endpoint include disk space required, minimum RAM, architecture, and minimum
operating systems and version? - ✔✔True
✔✔Which of the following is NOT a use case for Discover? - ✔✔Send inventory
information to Splunk for correlation with security events
✔✔Select the description that best fits the APPLICATION COMPONETS TAB on Map's
Application Discovery page - ✔✔Provides details about the processes hosting the
connections for each application component
✔✔What is the purpose of Tanium Discover? - ✔✔Find unmanaged devices and bring
them under control
✔✔To install Map tools on endpoints, the endpoints must ______. - ✔✔Be included in
the Map action group
✔✔In Asset, the key difference between views and reports is that reports are optimized
for programmatic integration, whereas views are optimized for interactive viewing,
sorting, and filtering - ✔✔False
✔✔Basic Interact questions are compromised of which two fundamental parts? -
✔✔Data to be collected; Devices to answer
✔✔Identify which item is a Connect destination? - ✔✔Splunk
✔✔What is a "source" in the context of the Trends module? - ✔✔A collection of sensors
that define a saved question
✔✔Which of the following is NOT a use case for Impact? - ✔✔Gain full visibility to the
environment and deliver software at speed and scale
✔✔Which of the following is NOT a use case for Integrity Monitor? - ✔✔Harden specific
assets against lateral attack
✔✔Comply findings can be exported by using Tanium Connect - ✔✔True
