A company requires employees to log in using their username, a password, and a one-time code generated by a hardware token fob. The security team wants to add a fingerprint scan to further strengthen authentication. Once the fingerprint scan is added, how many distinct authentication factor categories will the login process use?