CISSP-ISSAP: Information Systems Security Architecture Professional

Kerberos v5 authenticates clients using tickets and temporary session keys. These credentials are cached for the logon session and expire according to Kerberos policy; logging off clears the ticket cache and destroys the session keys. Smart cards and certificates remain usable beyond a single session, subject to their own credential lifetimes.