Question

A retail organization is expanding its Google Cloud footprint and wants to strengthen its posture-management capabilities. Leadership requires automated detection of misconfigurations, virtual machine and container vulnerability scanning, threat detection via Event Threat Detection and Container Threat Detection, and attack path simulation to prioritize exposed high-value assets. The current deployment uses only the free posture-management features of Security Command Center. As the Security Operations Engineer, which action best closes this capability gap?

Accepted Answer

Activate the Security Command Center Premium (or Enterprise) tier at the organization level to enable Event Threat Detection, vulnerability scanning, and attack path simulation.

Answer

Deploy Cloud IDS across all VPCs, since it provides misconfiguration detection, vulnerability scanning, and attack path simulation.

Answer

Enable the Standard tier of Security Command Center at each individual project level to unlock threat detection and attack path simulation.

Answer

Forward all Cloud Audit Logs to Google SecOps and build custom YARA-L rules to replicate Event Threat Detection and attack path simulation.