Which option limits a clientless SSL VPN user to specific resources upon successful login?

Which option limits a clientless SSL VPN user to specific resources upon successful login?

A.
modify the Cisco ASA Modular Policy Framework access control

B.
user-defined bookmarks

C.
RADIUS authorization

D.
disable portal features