Which concept describes the security context used by a process or thread, typically represented by a token?

Which concept describes the security context used by a process or thread, typically represented by a token?

• A. Relaying
• B. Access Tokens
• C. Pivoting
• D. Scheduled Task

Answer: (B)

Access tokens define the security context of a process or thread and are typically represented by a token. This token carries the identity of the user, the groups they belong to, and the privileges granted to them, plus any restrictions. When a process starts, the operating system attaches an access token to it, and every resource access the process attempts—such as files, registry keys, or network resources—is governed by what that token authorizes. In other words, the token determines what the process can do and which resources it can access. Understanding this helps explain why token theft or manipulation can let an attacker operate with the same rights as the legitimate user. The other options refer to different concepts: relaying is about using credentials in a new context, pivoting is moving laterally within a network, and a scheduled task is a method to run programs at set times with a user context, not the security context of a specific process.

Access tokens define the security context of a process or thread and are typically represented by a token. This token carries the identity of the user, the groups they belong to, and the privileges granted to them, plus any restrictions. When a process starts, the operating system attaches an access token to it, and every resource access the process attempts—such as files, registry keys, or network resources—is governed by what that token authorizes. In other words, the token determines what the process can do and which resources it can access. Understanding this helps explain why token theft or manipulation can let an attacker operate with the same rights as the legitimate user. The other options refer to different concepts: relaying is about using credentials in a new context, pivoting is moving laterally within a network, and a scheduled task is a method to run programs at set times with a user context, not the security context of a specific process.