City inspectors' Windows laptops should land in the Carbon Black Inspectors sensor group on first check-in, based on Active Directory OU. What must be in place before mass deployment?
Select an answer to reveal the explanation.
Short Explanation
First check-in is like assigning a new inspector a radio channel the moment the radio powers on—you program the channel list before you hand out radios. Sensor-group criteria on the OU do that. NSX groups and Access uninstall mappings are other products; waiting to drag devices later leaves a window on the wrong policy.
Full Explanation
Deployment plus Carbon Black sensor-group criteria together determine the first policy a new sensor receives. Matching the Inspectors OU before mass install avoids a period on a default or overly permissive policy. NSX-T security groups are not CBC sensor groups. Workspace ONE Access policies do not assign Carbon Black groups. Manual moves after check-in are operational cleanup, not the intended first-join design.