Company has decided to require multifactor authentication for all systems. Which set of parameters meets the requirement?

Multifactor authentication requires at least two distinct factors from different categories: knowledge (something you know, like a PIN or password), possession (something you have, like a physical token, smart card, or certificate), and inherence (something you are, like a fingerprint or facial scan). A personal 10-digit PIN represents 'something you know,' while an RSA certificate represents 'something you have,' thereby satisfying the MFA requirement.

A complex password and a personal 10-digit PIN both fall under the 'something you know' category, failing to provide two distinct factors for multifactor authentication.

A password and a personal 12-digit PIN both fall under the 'something you know' category, failing to provide two distinct factors for multifactor authentication.

Fingerprint scanning and facial recognition both fall under the 'something you are' (biometric) category, failing to provide two distinct factors for multifactor authentication.