A supported encrypted data service becomes unavailable after its customer-managed encryption key is disabled. What should the incident team check first?

1. Evaluate Cloud External Key Manager and the service's compatibility and availability requirements.
2. Restore authorized access to the required key and investigate the disabling event.
3. Retain required historical key versions until dependent data and recovery needs are verified.
4. Use Cloud HSM with suitable key configuration.