Public-health analysts cannot run Live Query / Audit and Remediation on a subset of clinics. Endpoint Standard sensors are online. What should the security administrator verify first?
Select an answer to reveal the explanation.
Short Explanation
Live Query is a different toolkit than Endpoint Standard. Confirm the clinic devices have Audit and Remediation or Enterprise EDR and a sensor that actually supports it.
Full Explanation
Carbon Black Cloud Audit and Remediation (Live Query) and Enterprise EDR are separate entitlements from Endpoint Standard. Online Standard sensors can still refuse Live Query if the SKU or sensor build does not include that feature. NSX-T DFW section names, Access MFA, and Guest Introspection VIBs are not the CBC product-SKU check.