Safe Computing Practice Test

To access a secure facility, an employee must swipe a keycard and also place their hand on a palm scanner. These two authentication factors fall into which of the following categories, respectively?

A user receives an email that appears to be from a popular social media site. The email warns that the user's account will be deactivated unless they click a link and enter their login credentials to confirm their identity. This is most likely an attempt at what type of attack?