Which two configurations do you implement when using a Pega Web Mashup? $($Choose two.$)$

A$.$ Configure the application permissions by specifying a list of trusted domains in the application rule.

B$.$ Configure a node$-$level data page to hold security access information about the external system.

C$.$ Leverage the standard authentication service IACAuthentication and update the authentication activities.

D$.$ Add an access group for the application rules that need to be accessed from the external system.