Why do we need to use authorization and deny = ?, when we can disable anonymous is IIS?

Hello,
Suppose we want to disable anonymous access, then there are 2 options:-
1) disable anonymous authentication mode in IIS
2) use authorization node in web.config and set deny users='?'
Under what circumstances do we use each of the above? Pls give example.