You create a Microsoft ASP.NET Web application by using the Microsoft .NET Framework version 3.5. 
You plan to set up authentication for the Web application. The application must support users from untrusted domains. 
You need to ensure that anonymous users cannot access the application. 
Which code fragment should you add to the Web.config file？（）

You create a Microsoft ASP.NET Web application by using the Microsoft .NET Framework version 3.5. 
You use Windows Authentication for the application. You set up NTFS file system permissions for the Sales group to access a particular file. You discover that all the users are able to access the file. You need to ensure that only the Sales group users can access the file. 
What additional step should you perform？（）