A cybersecurity analyst develops a regular expression to find data within traffic that will alarm on a hit.
The SIEM alarms on seeing this data in cleartext between the web server and the database server.
Which of the following types of data would the analyst MOST likely to be concerned with, and to which type of data classification does it belong?
A. Credit card numbers that are PCI
B. Social security numbers that are PHI
C. Credit card numbers that are PII
D. Social security numbers that are PII