How should the customer achieve this using Google Cloud Platform?

A customer needs an alternative to storing their plain text secrets in their source-code management (SCM) system.

How should the customer achieve this using Google Cloud Platform?
A . Use Cloud Source Repositories, and store secrets in Cloud SQL.
B . Encrypt the secrets with a Customer-Managed Encryption Key (CMEK), and store them in Cloud Storage.
C . Run the Cloud Data Loss Prevention API to scan the secrets, and store them in Cloud SQL.
D . Deploy the SCM to a Compute Engine VM with local SSDs, and enable preemptible VMs.

Answer: B