A security team needs a centralized platform to gain a comprehensive overview of their organization's security health across their entire Google…

Security Command Center is Google Cloud's centralized security and risk management platform. It provides a comprehensive, single-pane-of-glass view of security health across an entire Google Cloud organization. It aggregates security findings from various built-in and third-party services, enabling teams to discover assets, detect vulnerabilities, and identify threats, including those that might affect generative AI deployments. This centralization is precisely what the security team in the scenario requires for a holistic overview and effective risk management.

A. Workload monitoring tools, like Cloud Monitoring, focus on operational performance, uptime, and resource utilization, not on centralized security threat and vulnerability management.

C. Identity and Access Management (IAM) is a foundational service for controlling who can do what on specific resources, not a platform for a comprehensive security overview.

D. Secure-by-design infrastructure refers to the inherent security built into Google's global infrastructure, not a tool or platform that a security team uses for monitoring.

1. Google Cloud Documentation - Security Command Center overview: "Security Command Center is a centralized vulnerability and threat reporting service that helps you strengthen your security posture by identifying misconfigurations

vulnerabilities

and threats across your Google Cloud organization." (Source: Google Cloud

Security Command Center Documentation

"Overview of Security Command Center"

Section: "How Security Command Center works").

2. Google Cloud Whitepaper - Google Security Whitepaper: "Security Command Center provides a single pane of glass for security visibility

compliance

and governance across your Google Cloud services." (Source: Google Cloud

"Google Security Whitepaper"

2020

Page 35

Section: "Visibility and control").

3. Google Cloud Documentation - IAM overview: "Cloud Identity and Access Management (IAM) lets you grant granular access to specific Google Cloud resources and helps prevent access to other resources." This highlights its focus on access control

not centralized monitoring. (Source: Google Cloud

IAM Documentation

"Overview of IAM").

4. Google Cloud Documentation - Cloud Monitoring overview: "Cloud Monitoring collects metrics

events

and metadata from Google Cloud services

hosted uptime probes

application instrumentation

and a variety of common application components." This confirms its focus on operational metrics. (Source: Google Cloud

Cloud Monitoring Documentation

"Cloud Monitoring overview").