Which of the following is an example of multifactor authentication?
A. A password policy that requires both upper and lowercase letters
B. A short message service (SMS) message sent to a phone and an access PIN
C. Encryption of cached password information and a challenge question
D. A password that expires after 90 days and a PIN
