Which of the following statements is true about Kerberos authentication?

Which of the following statements is true about Kerberos authentication?

what is the answer?

$1.$It supports single sign$-$on $($SSO$)$ functionality.

$2.$It relies on plaintext transmission of user credentials.

$3.$It requires users to enter a different password for each resource.

$4.$It only works in Windows$-$based environments.