Scenario: You have a BigQuery table that receives gcp video

Full Certification Question

Scenario: You have a BigQuery table that receives data directly from a Pub/Sub subscription. The ingested data is currently encrypted using a Google-managed encryption key. A new organization policy requires that you use keys from a centralized Cloud Key Management Service (Cloud KMS) project to encrypt data at rest. Question: What should you do to meet the new encryption requirements for the data at rest?