You want to encrypt the customer data stored in BigQuery. You need to implement per-user crypto-deletion on data stored in your tables. You want to adopt native features in Google Cloud to avoid custom solutions. What should you do?

A. Implement Authenticated Encryption with Associated Data (AEAD) BigQuery functions while storing your data in BigQuery. B. Create a customer-managed encryption key (CMEK) in Cloud KMS. Associate the key to the table while creating the table. C. Create a customer-managed encryption key (CMEK) in Cloud KMS. Use the key to encrypt data before storing in BigQuery. D. Encrypt your data during ingestion by using a cryptographic library supported by your ETL pipeline.