Your Company Is Using Cloud Dataproc for Its Spark and Hadoop

Your company is using Cloud Dataproc for its Spark and Hadoop jobs. You want to be able to create, rotate, and destroy symmetric encryption keys used for the persistent disks used by Cloud Dataproc. Keys can be stored in the cloud. What should you do?

A) Use the Cloud Key Management Service to manage the data encryption key (DEK) .
B) Use the Cloud Key Management Service to manage the key encryption key (KEK) .
C) Use customer-supplied encryption keys to manage the data encryption key (DEK) .
D) Use customer-supplied encryption keys to manage the key encryption key (KEK) .