Microsoft Internet Information Server Case Studies & Practical Application 3

Question 1

A financial services company must log every HTTP request including query strings for compliance auditing. By default, IIS W3C logs omit query strings. What is the correct fix?

Accepted Answer

Add the cs-uri-query field to the W3C log fields selection in IIS Manager

Answer

The cs-uri-query field must be explicitly added to the W3C logging configuration to capture query strings in IIS access logs.

Question 2

An IIS site hosting a REST API returns correct responses locally but clients receive truncated JSON when connecting through a corporate proxy. Compression is enabled. What should you investigate first?

Accepted Answer

Disable dynamic compression on the IIS site and retest

Answer

Some proxies mishandle gzip-compressed responses, so disabling dynamic compression on IIS is the fastest way to isolate whether compression is the root cause.

Question 3

During a security audit, the team finds that the IIS server reveals its version number in HTTP response headers. Which header should be removed or modified?

Accepted Answer

Server

Answer

The Server response header discloses the IIS version and should be removed using URL Rewrite outbound rules or the removeServerHeader attribute to reduce attack surface.

Question 4

A healthcare organization runs an IIS site that must comply with HIPAA. They need to ensure all HTTP traffic is redirected to HTTPS automatically. What is the best IIS-native approach?

Accepted Answer

Set requireSSL='true' in web.config and use URL Rewrite to redirect HTTP to HTTPS

Answer

Combining a URL Rewrite redirect rule for HTTP-to-HTTPS with SSL Settings requireSSL ensures all traffic is encrypted and no unencrypted requests are served.

Question 5

An IIS application pool is configured with a recycling schedule at 3:00 AM. During recycling, users experience a brief service interruption. How can you eliminate this downtime?

Accepted Answer

Enable Overlapped Recycle (the default behavior) and ensure the new worker process starts before the old one exits

Answer

Overlapped recycling, which is on by default, starts the new worker process before terminating the old one, eliminating downtime during scheduled recycles.

Microsoft Internet Information Server Practice Test

Microsoft Internet Information Server Practice Test

Microsoft Internet Information Server Case Studies & Practical Application 3