How does a Tanium Question flow end-to-end from initiation to result?

How does a Tanium Question flow end-to-end from initiation to result?

• A. The Console issues a question; the Tanium Server broadcasts to endpoints via Relays; endpoints run sensors, return answers; the Server aggregates and displays results in the Console.
• B. The endpoint collectors poll a central database; results are pushed to the Console.
• C. The Server pushes queries to a cloud service which returns results to the Console.
• D. The user queries directly to endpoints which send results back to the Console.

Answer: (A)

The flow being tested is about how a Tanium Question is orchestrated across the architecture from start to finish. In Tanium, the Console initiates the request by sending the question to the Tanium Server. The Server then broadcasts that question through the Tanium Relays, so endpoints on the network receive the instruction without each endpoint needing to contact the Console directly. Each endpoint runs the requested sensors—the small, modular data collectors installed on every endpoint—and then returns the collected data back through the Relay network to the Tanium Server. The Server aggregates these responses and presents the results back in the Console for the user to see. This end-to-end path—initiation in the Console, distribution via Relays, endpoint execution, result return, and aggregation/display in the Console—is the standard Tanium Question flow. The other patterns (endpoints polling a central database, pushing results to the Console, server pushing to a cloud service, or users querying endpoints directly) don’t reflect how Tanium coordinates data collection and presentation.

The flow being tested is about how a Tanium Question is orchestrated across the architecture from start to finish. In Tanium, the Console initiates the request by sending the question to the Tanium Server. The Server then broadcasts that question through the Tanium Relays, so endpoints on the network receive the instruction without each endpoint needing to contact the Console directly. Each endpoint runs the requested sensors—the small, modular data collectors installed on every endpoint—and then returns the collected data back through the Relay network to the Tanium Server. The Server aggregates these responses and presents the results back in the Console for the user to see. This end-to-end path—initiation in the Console, distribution via Relays, endpoint execution, result return, and aggregation/display in the Console—is the standard Tanium Question flow. The other patterns (endpoints polling a central database, pushing results to the Console, server pushing to a cloud service, or users querying endpoints directly) don’t reflect how Tanium coordinates data collection and presentation.