wsHttpBinding supports multiple security modes including Transport, Message, and TransportWithMessageCredential. Message security can use Windows credentials or issued tokens (from an STS). The question correctly identifies issued token authentication as a supported option. Transport security with Windows is also supported, but Message with issued tokens is the best answer listed.