A utilities SOC must block USB mass storage on plant-floor PCs and allow it on helpdesk PCs. How should that be enforced in Carbon Black Cloud?
Select an answer to reveal the explanation.
Short Explanation
USB policy is a group membership card, not a sticky note on each PC. Two sensor groups, two policies with device control set differently—done.
Full Explanation
Carbon Black Cloud device control is a policy setting applied through sensor groups, so plant-floor and helpdesk populations can differ without per-sensor clicks. One Standard setting cannot both block and allow USB. NSX gateway firewall does not mediate USB mass-storage on the endpoint, and local Device Manager changes do not survive as a managed control.