Google Professional Cloud Database Engineer Practice Test 1

Question 1 / 40
Your organization has a security policy to ensure that all Cloud SQL for PostgreSQL databases are secure. You want to protect sensitive data by using a key that meets specific locality or residency requirements. Your organization needs to control the key's lifecycle activities. You need to ensure that data is encrypted at rest and in transit. What should you do?
Create the database with Google-managed encryption keys.
Create the database with customer-managed encryption keys.
Create the database persistent disk with Google-managed encryption keys.
Create the database persistent disk with customer-managed encryption keys.