By using a smart card and pin, you are using a two-factor authentication that satisfies

'Something you are' refers to a biometric inherence factor such as a fingerprint or iris scan, not a PIN, which is a knowledge-based credential.

A smart card is a physical token that satisfies the possession factor ('something you have'), and a PIN is a memorized secret that satisfies the knowledge factor ('something you know'). This pairing is the standard model for PIV/CAC authentication and meets the two-factor requirement by combining two distinct, independent authentication categories.

A PIN is not a biometric factor and does not satisfy 'something you are' - it is purely a knowledge-based secret, making this pairing incorrect.

'Something you remember' is not a recognized standard authentication factor category - the three accepted factors are something you know, something you have, and something you are.