When the first token stays out of the bag, the second draw comes from a smaller bag, and P(A and B) = P(A) × P(B given A): the general multiplication rule. Permutations count orders and combinations count groups, and both turn into probabilities when every order or group is equally likely. "At least one" is 1 minus the probability of none.