A remote employee logs into the company VPN by typing a username and a memorized passphrase. The security team wants to classify the authentication method being used. Which authentication factor does the passphrase represent?