What are the two authentication factors implemented in the solution?

• A. Password and PIN
• B. Physical object and physical characteristic
• C. Something you know and something you have
• D. Biometric and token

Answer: (B)

Two-factor authentication works by combining credentials from two different classes, so access requires proof from two distinct categories. In this solution, the two factors are a physical object and a biometric trait. That means something you have (a tangible item like a badge, token, or card) and something you are (a biometric such as a fingerprint or iris pattern). Using two different categories makes it much harder for an attacker to compromise access with a single stolen credential, since they’d need both the object and the biometric.

This is stronger than using two knowledge-based factors (like a password and a PIN), which are both “something you know” and can be phished or reused. While another valid cross-category pairing might be biometric plus a token, the described implementation matches the idea of a physical object plus a biometric, which is why this choice is the best fit.