Ultimate access to all questions.
You are working with a BigQuery table that currently ingests data directly from a Pub/Sub subscription. This ingested data is encrypted using a Google-managed encryption key. Your organization has introduced a new policy stipulating that all data at rest must be encrypted using keys from a centralized Cloud Key Management Service (Cloud KMS) project. How should you proceed to comply with this new organizational policy?