Microsoft Exam 98-367 Topic 5 Question 44 Discussion

At minimum two-factor authentication requires two out of three regulatory-approved authentication variables such as:

Something you know (like the PIN on your bank card or email password).

Something you have (the physical bank card or a authenticator token).

Something you are (biometrics like your finger print or iris pattern).