TANIUM TCO TAN-1000
PRACTICE TEST 60
QUESTIONS
Question 1: An operator needs the current operating system from every managed
endpoint. Which Tanium capability should the operator use �rst?
Choices:
1) Ask a dynamic question in Interact 2) Create a Patch maintenance window 3) Build a Deploy software bundle 4) Create a Discover scan pro�le
Correct Answer: Ask a dynamic question in Interact
Explanation: Interact is the core Tanium experience for asking dynamic questions and retrieving live endpoint data. A question using an operating-system sensor is the direct way to obtain the current OS from managed endpoints.Page 1
Question 2: In Tanium, what is the primary purpose of a sensor when a question is issued?
Choices:
1) To assign user permissions 2) To collect a speci�c piece of information from an endpoint 3) To schedule software installations 4) To de�ne a report visualization Correct Answer: To collect a speci�c piece of information from an endpoint Explanation: A sensor is endpoint content that the Tanium Client runs to obtain speci�c information, such as computer name, operating system, or running processes. Sensors provide the data returned in question results.Question 3: A user types a plain-language phrase into the Interact question �eld.What component helps translate that input into valid Tanium question syntax?
Choices:
1) Action approval engine 2) Patch applicability service 3) Natural language parser 4) Connect destination mapper
Correct Answer: Natural language parser
Explanation: The natural language parser interprets plain-language input and proposes valid Tanium queries. This lets operators build questions without memorizing all query syntax.Page 2
Question 4: Which statement correctly describes the basic roles of the get clause and the from clause in a Tanium question?
Choices:
1) The get clause selects users; the from clause selects roles 2) The get clause chooses actions; the from clause chooses packages 3) The get clause sets the schedule; the from clause sets expiration 4) The get clause speci�es data to retrieve; the from clause speci�es which endpoints should answer Correct Answer: The get clause speci�es data to retrieve; the from clause speci�es which endpoints should answer Explanation: The get clause identi�es the sensor data to retrieve, while the from clause identi�es the endpoint population that should respond. Filters can further re�ne either the returned data or the targeted endpoints, depending on where they are applied.Question 5: An operator wants to query a registry location, but the selected sensor requires the registry path to be supplied. What type of sensor is this?
Choices:
1) Parameterized sensor 2) Counting sensor 3) Module source 4) Dashboard sensor
Correct Answer: Parameterized sensor
Explanation: A parameterized sensor requires additional input before it can run, such as a registry path, �le path, or other value. The parameter is supplied when building or issuing the question.Page 3