Universal Containers (UC) has decided to build a new, highly sensitive application on the Lightning platform. The security team at UC has decided that they want users to provide a fingerprint in addition to username/password to authenticate to this application.

How can an Architect support fingerprints as a form of identification for Salesforce authentication?

A. Use Custom Login Flows with callouts to a third-party fingerprint scanning application.
B. Use Salesforce Two-factor Authentication with callouts to a third-party fingerprint scanning application.
C. Use Delegated Authentication with callouts to a third-party fingerprint scanning application.

D. Use an AppExchange product that does fingerprint scanning with native Salesforce Identity Confirmation.