As a digital product design agency, how can we gcp video

Full Certification Question

As a digital product design agency, how can we ensure that data on our Compute Engine disks is encrypted at rest using Cloud Key Management Service (KMS)? Also, how can we manage Cloud Identity and Access Management (IAM) permissions for these keys in a grouped manner for consistency?