In Cloud KMS, grant your Google Cloud project access to use the key.

Answer: C

Explanation:

https://cloud.google.com/kms/docs/ekm#how_it_works

– First, you create or use an existing key in a supported external key management partner system. This key has a unique URI or key path.

– Next, you grant your Google Cloud project access to use the key, in the external key management partner system.

– In your Google Cloud project, you create a Cloud EKM key, using the URI or key path for the externally-managed key.