1. Email.
2. Web page challenge.
3. Test message with pass code.

That's more than 2 so it's multi factor.