Your organization is preparing for a SOC 2 audit. The auditors require proof that you are continuously monitoring your GCP environment for misconfigurations (e.g., public Cloud Storage buckets, open firewall rules) and that you have a centralized dashboard for security alerts. Which TWO GCP services should you utilize? (Select TWO)

Security Command Center (SCC) is Google Cloud's native security and risk management platform, providing a centralized dashboard for all security alerts. Within SCC, Security Health Analytics automatically runs continuous scans against your GCP infrastructure to detect misconfigurations (like publicly accessible buckets, open firewall ports, or missing MFA) and maps them to compliance standards like SOC 2.