You want to encrypt a Compute Engine. What do you need to do?
Associate you image with a Google-managed key to encrypt it.
Associate you image with a customer-managed key to encrypt it.
Nothing. Images are encrypted by default with a customer-managed key.
Nothing. Images are encrypted by default with a Google-managed key.