Which of the following sensitive data items must be protected in transit at all times?

A.
Username, password, and session tokens require protection

B.
Only the username and session token, as long as the password is hashed using a
cryptographically secure hash function

C.
Only the password

D.
Username and password require protection. Session tokens do not, as they are randomly
generated.

Explanation: