http handlers > how can I protect .asp files

There are files that I want protected after authentication. These are .asp and .pdf files.

so, if I were to type www.test.com/test/test.asp or www.test.com/test/test.pdf , I wouldn't want to be able to execute this unless I have been authenticated.

Kim