A security lead wants one console that aggregates misconfigurations, vulnerability findings and threat detections from every project in the organization. Which Google Cloud service provides this?
Show answer and explanation
Answer: C
Security Command Center is Google Cloud's centralized security and risk management platform. It aggregates findings for misconfigurations, vulnerabilities and threats across organizations, folders and projects, giving security teams one console. That organization-wide view is what the security lead wants.
Why the other options are wrong
- A. Audit logs record administrative and data-access activity and can be exported. They are raw records rather than a consolidated risk-findings console.
- B. Cloud Armor protects applications from web attacks and DDoS through policies at the edge. It does not give a consolidated view of misconfigurations across projects.
- D. Identity-Aware Proxy controls access to applications based on user identity and context. It does not aggregate vulnerability or misconfiguration findings across the organization.