How can your organization most effectively identify all virtual machines that do not have the latest security update?

The operating systems of some of your organization’s virtual machines may have a security vulnerability.

How can your organization most effectively identify all virtual machines that do not have the latest security update?
A . View the Security Command Center to identify virtual machines running vulnerable disk images
B . View the Compliance Reports Manager to identify and download a recent PCI audit
C . View the Security Command Center to identify virtual machines started more than 2 weeks ago
D . View the Compliance Reports Manager to identify and download a recent SOC 1 audit

View Answer

Answer: A

Explanation:

Security Health Analytics and Web Security Scanner detectors generate vulnerabilities findings that are available in Security Command Center. Your ability to view and edit findings is determined by the Identity and Access Management (IAM) roles and permissions you are assigned. For more information about IAM roles in Security Command Center.

Reference link: https://cloud.google.com/security-command-center/docs/concepts-vulnerabilities-findings