Ultimate access to all questions.
As a member of the data governance team, you are responsible for enforcing security requirements. Your current task involves encrypting all data stored in BigQuery, using an encryption key that your team manages. You are required to create a mechanism for generating and storing encryption material exclusively within your on-premises hardware security module (HSM). While achieving this, you also want to utilize Google-managed solutions. How should you proceed to meet these requirements?