Question

Your security team uses Security Command Center Premium across the organization. During a routine review, the team wants a single, centralized way to see actively exploited OS package and container image vulnerabilities detected in running GKE workloads, correlated with CVE severity and available fixes, so they can prioritize patching. Which capability should they rely on?

Accepted Answer

Review Vulnerability findings surfaced in Security Command Center, which integrate GKE workload and Artifact Registry scanning results with CVE and CVSS details

Answer

Enable VM Manager OS patch deployment jobs and review the patch compliance dashboard in Compute Engine

Answer

Create a log-based metric in Cloud Logging that counts container image pulls and alert when unpatched images are deployed

Answer

Enable Event Threat Detection and mute all non-critical findings so only exploited vulnerabilities remain visible