Which two actions should you perform?

You use Microsoft Visual Studio 2010 and Microsoft .NET Framework 4.0 to create a Windows Communication Foundation (WCF) Data Services service.
The service connects to a Microsoft SQL Server 2008 database. The service is hosted by an Internet Information Services (IIS) 6.0 server.
You need to ensure that applications authenticate against user information stored in the database before the application is allowed to use the service.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A.
Configure IIS to require basic authentication.

B.
Configure IIS to allow anonymous access.

C.
Configure IIS to require Windows authentication.

D.
Enable the WCF Authentication Service.

E.
Modify the Data Services service to use a Microsoft ASP.NET membership provider.