ANSWER:
B: A logon corresponds to multiple NT domain groups. Each logon can represent an NT user account or an NT domain group, or it may not relate to an NT security entity at all. A logon cannot represent multiple groups.

Answers in Depth...