Which of the following is an example of a factor that would be categorized under 'something you are' when implementing multifactor authentication?
Retinal scan
Smart card in possession of the user
Password known only to the user
Digital certificate installed on a smartphone