A team is designing a mobile app that must require multi-factor authentication (MFA). Which steps should they take to implement MFA? (Choose two.)

To implement MFA for a mobile app, the team should use Amazon Cognito. Cognito User Pools provide a managed user directory service that supports MFA natively. The first step is to create a user pool in Amazon Cognito and add the application's users to it. Once the user pool is set up, MFA can be enabled directly on the user pool itself. This allows Cognito to handle the MFA challenge and verification process, simplifying development. Sending MFA codes directly from the app using SNS is not a standard or secure practice for user authentication; Cognito handles this. Creating IAM users for each application user is incorrect because IAM is for managing access to AWS resources, not for application end-users. Enabling MFA on IAM user accounts would secure access to the AWS console for developers, not the mobile app users.