A security analyst is tasked with defining the "something you are" factor of the company's MFA settings. Which
of the following is BEST to use to complete the configuration?


A. Gait analysis
B. Vein
C. Soft token
D. HMAC-based, one-time password