Well it depends on how you define replicate, I'm not aware of a technology that can perfectly recreate someone's face\fingerprint.

a photo\mask isn't perfect and actually in some instances they fail to work vs sensors because of that.

It is more of a question of how robust is the authentication method.(can a photo\mask fool it? which can happen sometime but usually require pretty high quality sample)