You are creating a distributed application by using Microsoft .NET Framework 3.5.
The application uses the Windows Communication Foundation model.
You need to ensure that the following requirements are met:
User authentication is performed at the message level.
Data protection is performed at the transport level.
Server authentication is performed at the transport level.
What are two possible ways to achieve this goal?
(Each correct answer presents a complete solution. Choose two.)

A.
<bindings>
<wsHttpBinding>
<binding name="main">
<security mode="TransportWithMessageCredential" >
</security>
</binding>
</wsHttpBinding>
</bindings>

B.
<bindings>
<wsHttpBinding>
<binding name="main">
<security mode="TransportWithMessageCredential" >
<transport clientCredentialType="Certificate" />
<message clientCredentialType="None"/>
</security>
</binding>
</wsHttpBinding>
</bindings>

C.
<bindings>
<wsHttpBinding>
<binding name="main">
<security mode="TransportWithMessageCredential" >
<transport clientCredentialType="Windows" />
<message clientCredentialType="None"/>
</security>
</binding>
</wsHttpBinding>
</bindings>

D.
<bindings>
<netTcpBinding>
<binding name="main">
<security mode="TransportWithMessageCredential" >
<transport clientCredentialType="Certificate" />
<message clientCredentialType="Certiticate"/>
</security>
</binding>
</netTcpBinding>
</bindings>