A new directive mandates the use of a security component to securely allow users to...

A smart card provides an additional factor of authentication by storing secure credentials, such as certificates, that cannot be guessed or replicated. It complements user accounts and is "something you have".

Why Not A (Fingerprint reader): This is "something you are", but the scenario specifically requires a physical token.

Why Not C (Secure token): Secure tokens are also valid but may not integrate as seamlessly into multi-factor authentication for physical and system access.

Why Not D (NFC scanner): An NFC scanner is a device and not a token itself; it reads cards or other credentials.

CompTIA A+ Exam Reference: Core 2 (220-1102), Section 2.5, access controls​.