A large financial institution is moving its Big Data analytics to Google Cloud Platform. They want to have maximum control over the encryption process of data s...

A large financial institution is moving its Big Data analytics to Google Cloud Platform. They want to have maximum control over the encryption process of data stored at rest in BigQuery.
What technique should the institution use?

A. Use Cloud Storage as a federated Data Source. B. Use a Cloud Hardware Security Module (Cloud HSM). C. Customer-managed encryption keys (CMEK). D. Customer-supplied encryption keys (CSEK).