What is a capability of Salesforce Identity

Require users to use a time-based token when logging into Salesforce outside the trusted IP ranges.
Require users to have a High Assurance session to access Reports, Dashboards, and Connected Apps.
Require users to enter a time-based token in addition to login credentials when accessing Salesforce.
Require users to have a High Assurance session to edit, modify, or delete selected objects.