A set of user information that defines their access to network resources during a logon.

• A. Access Token
• B. Account Policy
• C. Active Desktop
• D. Active Server Pages (ASP)

Answer: (A)

The set of user information that defines what they can access during a logon is the access token. When a user logs on, the system creates a token that represents the user’s identity and their permissions for that session. This token includes the user’s security identifier (SID), the SIDs of any groups the user belongs to, and the privileges the user has granted (like the ability to log on locally or access specific resources). As the user runs applications and requests access to resources, the operating system checks those requests against the permissions encoded in the token. That’s how the system enforces who can read, write, or execute files, access network shares, or perform other actions.

Other options don’t describe this session-specific set of rights. An account policy covers password and account rules, not the active permissions for a logon. Active Desktop and Active Server Pages (ASP) are unrelated features—one is a desktop UI concept and the other a web development technology—not about the logon’s access control token.