Which of the following is also known as something you know, something you have, and something you are?

An Access Control List (ACL) is a list of permissions attached to an object, defining who can access it and what operations they can perform, not an authentication method.

Multi-Factor Authentication (MFA) requires users to provide two or more verification factors from different categories to gain access. These categories are typically 'something you know' (e.g., password), 'something you have' (e.g., smart card, phone with authenticator app), and 'something you are' (e.g., fingerprint, facial recognition), significantly increasing security.

SMS (Short Message Service) is a text messaging service, which can be used as a 'something you have' factor in MFA, but it is not MFA itself.

NFC (Near Field Communication) is a set of communication protocols for communication between two electronic devices over a short distance, not an authentication method or concept itself.