A supported encrypted data service becomes unavailable after its customer-managed encryption key is disabled. What should the incident team check first?

1. Evaluate Cloud External Key Manager and the service's compatibility and availability requirements.
2. Restore authorized access to the required key and investigate the disabling event.
3. Use Cloud HSM with suitable key configuration.
4. Retain required historical key versions until dependent data and recovery needs are verified.