Question

A security engineer at a financial services company has just activated Security Command Center Premium at the organization level. Leadership wants an automated, continuously updated assessment of common resource misconfigurations across all projects—such as public Cloud Storage buckets, overly permissive firewall rules, and disabled audit logging—so that findings appear in a central dashboard without deploying any additional agents. Which built-in SCC service should the engineer rely on to meet this requirement?

Accepted Answer

Security Health Analytics, which automatically scans Google Cloud resources for predefined misconfiguration detectors and surfaces findings in SCC

Answer

Event Threat Detection, which analyzes Cloud Logging streams to identify active threats such as brute-force SSH and malware

Answer

Container Threat Detection, which monitors GKE node runtime behavior for suspicious binaries and reverse shells

Answer

Web Security Scanner, which crawls deployed App Engine and Compute Engine web applications for OWASP vulnerabilities