A new corporate policy requires all staff to use multifactor authentication to access company resources. Which of the following can be utilized to set up this form of identity and access management? (Choose two.)

Multifactor authentication (MFA) requires users to provide two or more distinct verification factors to gain access. Authentication tokens (e.g., hardware tokens, software tokens like OTP apps) and biometrics (e.g., fingerprint, facial recognition) are both distinct factors used to prove identity, making them suitable for MFA. Least privilege is an access control principle, not an MFA factor. LDAP (Lightweight Directory Access Protocol) is a protocol for accessing and maintaining distributed directory information services, not an MFA factor itself, though it can be used in conjunction with MFA. Password vaulting is a method for securely storing passwords, not an MFA factor. SAML (Security Assertion Markup Language) is an XML-based standard for exchanging authentication and authorization data between security domains, primarily used for single sign-on (SSO), not an MFA factor.