Microsoft Internet Information Server Communication & Stakeholder Relations 2 — Questions and Answers
Question 1: A stakeholder requests a weekly report on IIS site availability. Which built-in IIS feature provides the most direct data for this report?
- IIS Manager Dashboard
- HTTP logging with W3C format (Correct answer)
- Application Pool event viewer
- Windows Firewall logs
Correct answer: HTTP logging with W3C format
W3C format HTTP logs record every request with timestamps, status codes, and response times, making them ideal for availability reporting.
Question 2: When communicating a planned IIS server maintenance window to application owners, which HTTP status code should the temporary redirect page return to avoid SEO impact?
- 301 Moved Permanently
- 302 Found (Temporary Redirect)
- 307 Temporary Redirect
- 503 Service Unavailable with Retry-After header (Correct answer)
Correct answer: 503 Service Unavailable with Retry-After header
A 503 with a Retry-After header correctly signals scheduled maintenance to browsers and crawlers without affecting permanent rankings.
Question 3: A developer team wants real-time notifications when their IIS application pool crashes. Which mechanism best fulfills this requirement?
- IIS Manager email alerts
- Windows Event Log subscription with email task (Correct answer)
- HTTP ping from an external monitor
- Scheduled PowerShell log parse
Correct answer: Windows Event Log subscription with email task
A Windows Event Log subscription tied to an email-sending scheduled task triggers immediately when the application pool failure event is logged.
Question 4: A security team asks how IIS communicates the server version to clients. Which HTTP response header reveals this information by default?
- X-Powered-By
- Server (Correct answer)
- Content-Type
- X-AspNet-Version
Correct answer: Server
The Server response header contains the IIS version string and should be removed or customized to reduce information disclosure.
Question 5: Management asks you to prove that IIS is enforcing HTTPS for all stakeholder-facing pages. Which IIS feature demonstrates this enforcement?
- URL Rewrite rule redirecting HTTP to HTTPS
- Require SSL checkbox in IIS Manager SSL Settings
- HSTS header in HTTP Response Headers module
- All of the above serve as evidence (Correct answer)
Correct answer: All of the above serve as evidence
Any combination of URL Rewrite redirects, SSL requirement settings, and HSTS headers can enforce and demonstrate HTTPS-only access.
Question 6: A client wants IIS to return a branded error page instead of the default 404 page. Which IIS configuration section controls custom error pages?
- httpErrors in system.webServer (Correct answer)
- customErrors in system.web
- errorDocument in system.webServer
- defaultDocument in system.webServer
Correct answer: httpErrors in system.webServer
The httpErrors element in system.webServer configures custom HTTP error responses at the IIS level, overriding default error pages.
Question 7: During a post-incident review, stakeholders ask which IIS log field shows how long the server took to process each request.
- cs-bytes
- time-taken (Correct answer)
- sc-status
- cs-uri-stem
Correct answer: time-taken
The time-taken W3C log field records the elapsed time in milliseconds from receiving a request to sending the last byte of the response.
Microsoft Internet Information Server Communication & Stakeholder Relations 2
A stakeholder requests a weekly report on IIS site availability.
Which built-in IIS feature provides the most direct data for this report?