A company is creating an access control system that uses something you have and something you are. Which of the following will be required for user authentication? (Choose two.)

A password manager helps users store and manage passwords, which is 'something you know,' not 'something you have' or 'something you are.'

Encryption keys are used for data protection and secure communication, not typically as direct user authentication factors in the 'something you have/are' context, though they might be stored on a 'something you have' device.

A biometric scanner represents 'something you are,' verifying identity based on unique biological characteristics like fingerprints, facial recognition, or iris scans.

A smartcard reader is used with a smartcard, which represents 'something you have,' a physical token carried by the user containing authentication credentials.

A host-based IDS (Intrusion Detection System) monitors a single host for malicious activity and is a security control, not an authentication factor for a user.

A PIN code is a form of 'something you know,' similar to a password, not 'something you have' or 'something you are.'