A sign-in requires a password and a verification using an independent possession factor. Which capability does this illustrate?

1. Single sign-on alone
2. Multifactor authentication
3. Access review
4. Password synchronization only