How should the team complete this task?

A customer’s internal security team must manage its own encryption keys for encrypting data on Cloud Storage and decides to use customer-supplied encryption keys (CSEK).

How should the team complete this task?
A . Upload the encryption key to a Cloud Storage bucket, and then upload the object to the same bucket.
B . Use the gsutil command line tool to upload the object to Cloud Storage, and specify the location of the encryption key.
C . Generate an encryption key in the Google Cloud Platform Console, and upload an object to Cloud Storage using the specified key.
D . Encrypt the object, then use the gsutil command line tool or the Google Cloud Platform Console to upload the object to Cloud Storage.

Answer: D

Explanation:

Reference: https://cloud.google.com/storage/docs/encryption/customer-supplied-keys