Microsoft Internet Information Server Communication & Stakeholder Relations 3 — Questions and Answers
Question 1: A compliance officer needs confirmation that all IIS communication with external clients is encrypted. Which PowerShell cmdlet verifies the TLS protocols enabled on the server?
- Get-TlsCipherSuite
- Get-SslBinding
- Get-WebConfiguration //security/access
- Get-ItemProperty HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols (Correct answer)
Correct answer: Get-ItemProperty HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols
The SCHANNEL registry path contains the enabled/disabled state for each TLS protocol version on Windows Server.
Question 2: An operations team needs to remotely manage IIS on a server without RDP access. Which service must be running to use IIS Manager remotely?
- World Wide Web Publishing Service
- Web Management Service (WMSvc) (Correct answer)
- IIS Admin Service
- Windows Remote Management (WinRM)
Correct answer: Web Management Service (WMSvc)
Web Management Service (WMSvc) exposes IIS Manager over port 8172, enabling remote IIS administration without a full RDP session.
Question 3: A project manager asks why some users receive a 401 Unauthorized response from the IIS intranet site. Which authentication setting is most likely misconfigured?
- Anonymous Authentication is enabled
- Windows Authentication is disabled (Correct answer)
- Forms Authentication timeout is too short
- Basic Authentication requires HTTPS
Correct answer: Windows Authentication is disabled
A 401 on an intranet site typically means Windows Authentication is not enabled, so IIS cannot challenge clients for domain credentials.
Question 4: Stakeholders want IIS to send an automatic email when disk space for logs drops below 10%. Which tool integrates most directly with IIS for this purpose?
- IIS Manager Alerts module
- Windows Performance Monitor alert action (Correct answer)
- Web Platform Installer notification
- Failed Request Tracing
Correct answer: Windows Performance Monitor alert action
Windows Performance Monitor can watch disk free space counters and trigger an email alert action when a threshold is crossed.
Question 5: A development team communicates that their app requires WebSocket support in IIS. Which Windows feature must be installed to enable this?
- WebDAV Publishing
- WebSocket Protocol feature under Application Development (Correct answer)
- Dynamic Content Compression
- HTTP Activation
Correct answer: WebSocket Protocol feature under Application Development
The WebSocket Protocol is an optional IIS feature under Application Development that must be explicitly installed to support ws:// and wss:// upgrades.
Question 6: A QA team reports that IIS returns stale content even after deployments. Which HTTP response header should developers ask you to configure to control client-side caching behavior?
- Pragma
- Cache-Control (Correct answer)
- Expires
- ETag
Correct answer: Cache-Control
Cache-Control is the modern HTTP header that precisely controls caching directives like max-age, no-cache, and no-store for browsers and proxies.
Question 7: During a change advisory board meeting, you must describe the IIS rollback plan if a new configuration causes site failure. Which IIS feature supports configuration rollback?
- IIS Shared Configuration
- Application Pool recycling
- IIS Configuration History (Correct answer)
- Web Deploy snapshots
Correct answer: IIS Configuration History
IIS Configuration History automatically stores timestamped backups of applicationHost.config, allowing point-in-time rollback via the IIS Manager or xcopy.
Microsoft Internet Information Server Communication & Stakeholder Relations 3
A compliance officer needs confirmation that all IIS communication with external clients is encrypted.
Which PowerShell cmdlet verifies the TLS protocols enabled on the server?