A company with dozens of projects wants one console that inventories its cloud assets, surfaces misconfigurations and vulnerabilities, and shows findings mapped to compliance benchmarks across the whole organization. Which service provides this?
Show answer and explanation
Answer: C
Security Command Center gives organization-wide visibility into cloud assets, security findings such as misconfigurations and vulnerabilities, and compliance posture against benchmarks. It is Google Cloud's central place for security and risk management across projects. Logging stores and queries logs, Monitoring tracks performance metrics, and Cloud Identity manages users and groups, so none of them give a consolidated security posture view.
Why the other options are wrong
- A. Cloud Logging stores and queries log entries, and log-based metrics count matching events. It does not inventory assets or score findings against security benchmarks.
- B. Cloud Monitoring focuses on performance metrics and alerting. It shows resource health, not security misconfigurations or compliance posture across the organization.
- D. Cloud Identity manages users, groups, and device policies. It does not inventory cloud resources or report misconfigurations and vulnerabilities.