Which two strategies are used to protect personally identifiable information? (Choose two.)

Encrypting data in transit protects PII from eavesdropping and interception as it travels between systems over networks, ensuring confidentiality during communication.

Encrypting hash values of data is not a standard or effective strategy for protecting the original personally identifiable information; hashing is a one-way function typically used for integrity or secure password storage (where the hash, not the original password, is stored).

Encrypting data at rest protects PII stored on databases, file systems, or other storage media from unauthorized access, even if the underlying storage infrastructure is compromised.

Keeping usernames and passwords (which are PII) for efficient lookup without proper security measures like hashing and salting is a severe security vulnerability, not a protection strategy.

While encrypting usernames and passwords is a step, the best practice for passwords (a form of PII) is secure hashing with salting, not just reversible encryption, and this choice is too narrow for general PII protection.