Microsoft Internet Information Server IIS Security & Authentication

Question 1

Which IIS authentication method sends credentials as a base64-encoded string that can easily be decoded?

Accepted Answer

Basic Authentication

Answer

Windows Authentication

Answer

Digest Authentication

Answer

Forms Authentication

Question 2

What is the primary advantage of Windows Authentication in IIS for intranet environments?

Accepted Answer

Users are authenticated via their Active Directory credentials without entering a password again

Answer

It supports all browsers equally including mobile

Answer

It encrypts traffic automatically without SSL

Answer

It works across all internet-facing websites

Question 3

Which IIS feature allows you to block requests from specific IP addresses or ranges?

Accepted Answer

IP Address and Domain Restrictions

Answer

Request Filtering

Answer

URL Authorization

Answer

Dynamic IP Restrictions

Question 4

What SSL/TLS binding type in IIS 8+ allows multiple SSL certificates on one IP address using SNI?

Accepted Answer

SNI (Server Name Indication)

Answer

Wildcard binding

Answer

IP-based SSL

Answer

SAN certificate binding

Question 5

Which IIS feature limits the types of file extensions and HTTP verbs that can be requested?

Accepted Answer

Request Filtering

Answer

Output Caching

Answer

MIME Types

Answer

Compression

Question 6

What is the default identity under which IIS application pool worker processes run?

Accepted Answer

ApplicationPoolIdentity

Answer

NETWORK SERVICE

Answer

LOCAL SYSTEM

Answer

IUSR