Which pair of credentials satisfies a multifactor authentication requirement?

Multifactor authentication (MFA) requires two or more independent authentication factors from different categories. The categories are: something you know (knowledge factor), something you have (possession factor), and something you are (inherence factor). A personal 10-digit PIN is a knowledge factor (something you know). An RSA certificate, stored on a smart card or token, is a possession factor (something you have). Using both satisfies MFA. A complex password and a personal 10-digit PIN are both knowledge factors. A password (8-15 chars) and a personal 12-digit PIN are also both knowledge factors. Fingerprint scan and facial recognition are both inherence factors. These options do not combine factors from different categories, thus failing to meet MFA requirements.