What should you do?

Your organization processes sensitive health information. You want to ensure that data is encrypted while in use by the virtual machines (VMs). You must create a policy that is enforced across the entire organization.

What should you do?
A . Implement an organization policy that ensures that all VM resources created across your organization use customer-managed encryption keys (CMEK) protection.
B . Implement an organization policy that ensures all VM resources created across your organization are Confidential VM instances.
C . Implement an organization policy that ensures that all VM resources created across your organization use Cloud External Key Manager (EKM) protection.
D . No action is necessary because Google encrypts data while it is in use by default.

Answer: A