Your company is storing sensitive data in Cloud Storage. You want a key generated on-premises to be used in the encryption process. What should you do? 

Answer options:

A. Use the Cloud Key Management Service to manage a data encryption key (DEK).
B. Use the Cloud Key Management Service to manage a key encryption key (KEK).
C. Use customer-supplied encryption keys to manage the data encryption key (DEK).
D. Use customer-supplied encryption keys to manage the key encryption key (KEK).

A

Reference: https://cloud.google.com/security/encryption-at-rest/default-encryption/