A network manager wants to protect the company's VPN by implementing multifactor authentication that uses: Something you know - Something you have - Something you are - Which of the following would accomplish the manager's goal?

The correct answer, "Password, authentication token, thumbprint," directly aligns with the multifactor authentication (MFA) requirements. A password represents "something you know." An authentication token (e.g., a hardware token or software-generated OTP) represents "something you have." A thumbprint (biometric) represents "something you are." This combination provides strong authentication by requiring three distinct factors. "Domain name, PKI, GeoIP lookup" includes elements that are not user authentication factors. A domain name is an identifier, PKI is an infrastructure for managing keys and certificates, and GeoIP lookup is a location-based check, not a user factor. "VPN IP address, company ID, facial structure" incorrectly uses "VPN IP address" and "company ID" as authentication factors. An IP address is a network identifier, and a company ID is typically an identifier, not a secret or possession. Facial structure is a biometric, fitting "something you are," but the other two are incorrect. "Company URL, TLS certificate, home address" includes elements that are not user authentication factors. A company URL is an address, a TLS certificate is for securing communication, and a home address is personal information, not an authentication factor.