Your business has decided to add credit card numbers to the data it backs up to tape. Which of the following represents the best practice your business should observe? 

Do not back up either the credit card numbers or their hashes. 

Encrypt backup tapes that are sent off-site. 

Back up the hashes of the credit card numbers not the actual credit card numbers. 

Hire a security consultant to provide direction.