A. It requires the subject to claim an identity.
B. Multiple KDCs can exist in the same network.
C. A time stamp is added before being sent to the user.
D. It is based on the hash of the password.
The correct answer is C.
Domain: 5.1. Kerberos adds a time stamp to each ticket to limit the ability of abusive reuse of tickets. By forcing ticket expiration, the time frame for reuse abuse is limited.