Based on PCI DSS v3.4, One Particular database field can store data, but the data must be unreadable. which of the following data objects meets this requirement?

1. PAN
2. CVV2
3. Cardholder name
4. expiration date

1. Record
2. Field
3. Primary key
4. All of these

1. Data dictionary
2. database
3. username
4. None of these

The answer i am thinking is C but need to validate 

An organization is developing a disaster recovery plan that requires data to be backed up and available at a moment's notice.

Which of the following should the organization consider FIRST to address this requirement?

A. Implement a change management plan to ensure systems are using the appropriate versions.

B. Hire additional on-call staff to be deployed if an event occurs.

C. Design an appropriate warm site for business continuity.

D. Identify critical business processes and determine associated software and hardware requirements.