Which set of access control solutions implements two-factor authentication?

A USB token represents the 'something you have' factor (a physical possession) while a PIN represents the 'something you know' factor (a memorized secret). Combining these two different factor categories satisfies the definition of true multi-factor authentication, as each credential comes from a separate category.

Both a fingerprint and a retina scan are biometric factors that fall under 'something you are', so this is single-factor authentication using two inputs from the same category.

Both a password and a PIN are knowledge-based factors ('something you know'), making this single-factor authentication despite involving two separate secrets.

An account name and password are both 'something you know' factors, providing only one authentication factor category and not satisfying two-factor requirements.