TANIUM CERTIFIED OPERATOR (TAN-1000) PRACTICE EXAM
1. What is the primary function of Tanium Core Platform?
A. Antivirus scanning
B. Endpoint detection and response
C. Real-time visibility and control over endpoints
D. Vulnerability patch management
Answer: C
Explanation: The Tanium Core Platform is designed to provide real-time
visibility and control over endpoints in large enterprise environments.
2. Which module is used to deploy software in Tanium?
A. Deploy
B. Patch
C. Interact
D. Asset
Answer: A
Explanation: The Deploy module allows users to deliver software and execute
packages across managed endpoints.
3. What does the Tanium Client use to communicate with other clients?
A. TCP/IP multicast
B. Hub-and-spoke protocol
C. Linear chain peer-to-peer communication
D. Direct API calls
Answer: C
Explanation: Tanium uses a linear chain peer-to-peer communication model to
efficiently scale across networks.
,4. What port does the Tanium Client use to listen for incoming peer
communications?
A. 17472
B. 443
C. 80
D. 22
Answer: A
Explanation: Port 17472 is used by the Tanium Client to communicate with its
peers in the linear chain.
5. Which Tanium feature allows you to ask a question across the
enterprise?
A. Patch
B. Sensors
C. Interact
D. Reveal
Answer: C
Explanation: The Interact module allows you to ask natural-language questions
to endpoints and get responses in real time.
6. What is a Tanium Sensor?
A. A tool to block malware
B. A script that collects specific data from endpoints
C. A dashboard view
D. An OS-level patch
Answer: B
Explanation: Sensors are small scripts that collect endpoint data for questions
asked in Interact.
7. What does a Tanium Package consist of?
A. A single sensor
B. A command-line instruction or file deployment
C. A dashboard
D. A peer list
Answer: B
,Explanation: Packages contain one or more actions to be executed on the
endpoint (e.g., file copy, command execution).
8. Which Tanium feature groups endpoints logically for management?
A. Action Group
B. Sensor
C. Chain Link
D. Endpoint Tag
Answer: A
Explanation: Action Groups allow users to target sets of endpoints based on
filters.
9. What is the default port for Tanium Server communication?
A. 17472
B. 443
C. 80
D. 22
Answer: B
Explanation: The Tanium Server typically communicates with clients over
HTTPS (port 443).
10. What function does the Tanium Console serve?
A. Real-time OS scanning
B. A web interface for Tanium management
C. An antivirus engine
D. A server-side encryption tool
Answer: B
Explanation: The Tanium Console is a browser-based interface used to manage
and interact with the Tanium platform.
11. What kind of data does a Tanium Question return?
A. Hash values
B. Real-time endpoint data
C. Packet captures
D. Network topology maps
Answer: B
, Explanation: Tanium Questions return real-time data about endpoints, sourced
from sensors.
12. What is a Sensor Source in Tanium?
A. The origin server
B. A file on the server
C. A command or script
D. A container image
Answer: C
Explanation: A sensor source is the actual code (PowerShell, VBScript, shell
script, etc.) that runs on the endpoint to gather information.
13. Which of the following can you use to limit a package deployment?
A. Bandwidth throttle
B. Action Group
C. API
D. Event Log
Answer: B
Explanation: Packages are targeted using Action Groups, which define which
endpoints should receive the deployment.
14. Which module should be used to scan for sensitive data?
A. Reveal
B. Patch
C. Enforce
D. Trends
Answer: A
Explanation: Tanium Reveal scans endpoints for sensitive data patterns like
PII, PHI, etc.
15. What is Tanium Patch used for?
A. Updating antivirus signatures
B. Querying endpoint data
C. Managing OS and third-party application patches
D. Real-time chat support
Answer: C
1. What is the primary function of Tanium Core Platform?
A. Antivirus scanning
B. Endpoint detection and response
C. Real-time visibility and control over endpoints
D. Vulnerability patch management
Answer: C
Explanation: The Tanium Core Platform is designed to provide real-time
visibility and control over endpoints in large enterprise environments.
2. Which module is used to deploy software in Tanium?
A. Deploy
B. Patch
C. Interact
D. Asset
Answer: A
Explanation: The Deploy module allows users to deliver software and execute
packages across managed endpoints.
3. What does the Tanium Client use to communicate with other clients?
A. TCP/IP multicast
B. Hub-and-spoke protocol
C. Linear chain peer-to-peer communication
D. Direct API calls
Answer: C
Explanation: Tanium uses a linear chain peer-to-peer communication model to
efficiently scale across networks.
,4. What port does the Tanium Client use to listen for incoming peer
communications?
A. 17472
B. 443
C. 80
D. 22
Answer: A
Explanation: Port 17472 is used by the Tanium Client to communicate with its
peers in the linear chain.
5. Which Tanium feature allows you to ask a question across the
enterprise?
A. Patch
B. Sensors
C. Interact
D. Reveal
Answer: C
Explanation: The Interact module allows you to ask natural-language questions
to endpoints and get responses in real time.
6. What is a Tanium Sensor?
A. A tool to block malware
B. A script that collects specific data from endpoints
C. A dashboard view
D. An OS-level patch
Answer: B
Explanation: Sensors are small scripts that collect endpoint data for questions
asked in Interact.
7. What does a Tanium Package consist of?
A. A single sensor
B. A command-line instruction or file deployment
C. A dashboard
D. A peer list
Answer: B
,Explanation: Packages contain one or more actions to be executed on the
endpoint (e.g., file copy, command execution).
8. Which Tanium feature groups endpoints logically for management?
A. Action Group
B. Sensor
C. Chain Link
D. Endpoint Tag
Answer: A
Explanation: Action Groups allow users to target sets of endpoints based on
filters.
9. What is the default port for Tanium Server communication?
A. 17472
B. 443
C. 80
D. 22
Answer: B
Explanation: The Tanium Server typically communicates with clients over
HTTPS (port 443).
10. What function does the Tanium Console serve?
A. Real-time OS scanning
B. A web interface for Tanium management
C. An antivirus engine
D. A server-side encryption tool
Answer: B
Explanation: The Tanium Console is a browser-based interface used to manage
and interact with the Tanium platform.
11. What kind of data does a Tanium Question return?
A. Hash values
B. Real-time endpoint data
C. Packet captures
D. Network topology maps
Answer: B
, Explanation: Tanium Questions return real-time data about endpoints, sourced
from sensors.
12. What is a Sensor Source in Tanium?
A. The origin server
B. A file on the server
C. A command or script
D. A container image
Answer: C
Explanation: A sensor source is the actual code (PowerShell, VBScript, shell
script, etc.) that runs on the endpoint to gather information.
13. Which of the following can you use to limit a package deployment?
A. Bandwidth throttle
B. Action Group
C. API
D. Event Log
Answer: B
Explanation: Packages are targeted using Action Groups, which define which
endpoints should receive the deployment.
14. Which module should be used to scan for sensitive data?
A. Reveal
B. Patch
C. Enforce
D. Trends
Answer: A
Explanation: Tanium Reveal scans endpoints for sensitive data patterns like
PII, PHI, etc.
15. What is Tanium Patch used for?
A. Updating antivirus signatures
B. Querying endpoint data
C. Managing OS and third-party application patches
D. Real-time chat support
Answer: C
