Which of the following multifactor authentication methods does the smart card satisfy?

Smart cards are physical tokens that a user must possess to authenticate, placing them squarely in the 'something you have' MFA category. The card itself holds a cryptographic credential or certificate, but the defining characteristic is that it is a physical item in the user's possession. Without the card present, authentication cannot proceed, regardless of other knowledge or biometric factors.

Something you know refers to memorized secrets such as passwords, PINs, or passphrases, not a physical device.

Something you are refers to biometric identifiers such as fingerprints, retina scans, or facial recognition, not a physical token.

'Something you look like' is not a recognized standard MFA factor category in any major security framework.