Question

Your security team uses Security Command Center Premium across a large organization. They are overwhelmed by thousands of open vulnerability and misconfiguration findings and cannot tell which ones actually put high-value assets at risk. Leadership asks you to focus remediation effort on the findings that are most likely to be chained by an external attacker to compromise crown-jewel resources. Which Security Command Center capability should you use to prioritize this work?

Accepted Answer

Enable Attack path simulations and review the attack exposure scores tied to resources you designate as high-value in resource value configurations.

Answer

Export all findings to BigQuery and write scheduled queries that count findings by severity to build a remediation backlog.

Answer

Create mute rules for all Low and Medium severity findings so that only High and Critical findings remain visible.

Answer

Turn on Event Threat Detection and route its findings to a Pub/Sub topic monitored by the SOC for real-time triage.