A retail company currently uses Security Command Center Standard and wants to add continuous vulnerability scanning of running assets, detection of anomalous IAM behavior via Event Threat Detection, and Security Health Analytics compliance benchmark reporting (CIS, PCI DSS). They do NOT require SIEM/SOAR case management or third-party posture data ingestion. Which activation choice best meets these requirements at the lowest cost?