You are creating an ASP.NET application by using the .NET Framework 3.5. The application has several subdirectories under the application root directory. Only the users who belong to an approved role can access the contents of the subdirectory. The user authorizations for the subdirectories must be stored in a single Web.config file in the application root directory. You need to ensure that the node encloses the approved roles and specifies the appropriate subdirectory.
Which node should you use?

A.
<location>

B.
<clientTarget>

C.
<authorization>

D.
<authentication>