What should you do?

Your company is storing sensitive data in Cloud Storage. You want a key generated on-premises to be used in the encryption process.

What should you do?
A . Use the Cloud Key Management Service to manage a data encryption key (DEK).
B . Use the Cloud Key Management Service to manage a key encryption key (KEK).
C . Use customer-supplied encryption keys to manage the data encryption key (DEK).
D . Use customer-supplied encryption keys to manage the key encryption key (KEK).

Answer: C

Explanation:

Reference: https://cloud.google.com/security/encryption-at-rest/default-encryption/