Question

Which of the following statement is correct for access token ?
1.It contains the destination for access token.
2.It contains a list of the privileges held by either the user or the user's groups.
3.Impersonation Token is a personal token.
4.All of the above
Answers require a reason.

Answer 1

Answer:

2.It contains a list of the privileges held by either the user or the user's groups.

Explanation:

An access token is an object that describes the security context of a process or thread. The information in a token includes the identity and privileges of the user account associated with the process or thread. ... Access tokens contain the following information: The security identifier (SID) for the user's account.

Answer 2

Answer:

Impersonation Token is a personal token. is the correct answer

Explanation:

Token:

• A token is an object that stands in for something else, such as another object either physical or virtual or an abstract notion.
• Tokens come in a variety of forms in computers.

Impersonation Token:

• Personal access tokens known as impersonation tokens can only be made by an administrator for a single user.
• They are a perfect fit if you want to create program or scripts that communicate with the API in the capacity of a certain user. Consult the documentation for the users API for additional details.
• A server may "impersonate" a client process in security operations by using an access token (MSFT Access Token) designed to capture the security details of the client process.

SPJ3