Which of the following are examples of something you have for authentication controls? (Select two)

Authentication controls are mechanisms used to verify the identity of a user or process. The correct answer that includes examples of something you have for authentication controls focuses on tangible items or tokens that a user possesses.

A smart card is a physical device that contains embedded integrated circuits, which can store and process data as well as securely authenticate the user when it is presented to a reader. This kind of authentication falls under "something you have" because the user needs to physically possess the smart card to gain access.

Additionally, a PIN, or Personal Identification Number, is a numerical code that a user inputs to prove their identity. While a PIN is often associated with something a user knows, it is frequently combined with something they possess, such as an ATM card or device where the PIN is required for access. Therefore, in many systems, the PIN represents part of the authentication process involving something the user has.

Although voice recognition and a photo ID involve user identity verification, they do not fit as "something you have" in the same way. Voice recognition is based on "something you are," encompassing biometrics, while a photo ID is more about presenting an identity rather than a secure token for authentication.