A company stores sensitive customer data in BigQuery. The security team requires that only specific service accounts can decrypt and read the data. The data must remain encrypted at rest using customer-managed keys. Which approach should a data engineer implement?
This is a free preview. Create an account to access all 340 questions.