Which option provides built-in posture for the compliance framework within SCC posture?

• A. Audit Manager with compliance framework; export evaluation.
• B. BigQuery CAI queries scheduled regularly.
• C. Implement control framework using Rego in Workload Manager and schedule report.
• D. Implement the built-in posture for the compliance framework within SCC posture.

Answer: (D)

The key idea here is that Security Command Center (SCC) posture includes a built-in option specifically for monitoring a compliance framework. This built-in posture provides out-of-the-box, maintained checks that map to recognized compliance standards (so you can see how your resources measure against those controls) and continuously evaluates your environment within SCC Posture Management. It gives you visibility, identified gaps, and remediation guidance without needing to deploy or configure external tools or custom policies.

That’s why this choice is the best: it directly leverages the built-in compliance posture within SCC posture, offering an integrated, ready-made solution. The other options refer to tools or approaches outside of this built-in posture (Audit Manager from another cloud, custom Rego policies with a separate workload tool, or ad-hoc queries), which don’t provide the built-in compliance posture inside SCC posture itself.