By using a smart card and pin, you are using a two-factor authentication that satisfies

Something you are refers to a biometric factor such as a fingerprint or retina scan; a PIN is a memorized secret, not a biometric identifier.

The smart card is a possession-based factor (something you have) because it is a physical object the user must carry, and the PIN is a knowledge-based factor (something you know) because it is a memorized secret stored only in the user's memory. Together they satisfy two distinct authentication categories, meaning an attacker must both steal the physical card and know the PIN to gain access. This combination is widely deployed in PIV, CAC, and banking authentication systems.

Something you are is a biometric factor; a PIN does not represent a physical or biological characteristic of the user.

Something you remember is not a standard authentication category - the correct term for a memorized secret is something you know, making this phrasing technically inaccurate.