You set the multi-factor authentication status for a user named admin1@contoso.com to Enabled.

Admin1 accesses the Azure portal by using a web browser.

Which additional security verifications can Admin1 use when accessing the Azure portal?

A. an app password, a text message that contains a verification code, and a verification code sent from the Microsoft Authenticator app

B. a phone call, a text message that contains a verification code, and a notification or a verification code sent from the Microsoft Authenticator app

C. a phone call, an email message that contains a verification code, and a text message that contains an app password
D. an app password, a text message that contains a verification code, and a notification sent from the Microsoft Authenticator app

References:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods