Microsoft Internet Information Server Communication & Stakeholder Relations 5 — Questions and Answers
Question 1: A product owner asks you to explain what happens when an IIS application pool reaches its rapid-fail protection threshold. What is the communication effect to users?
- Users see a 401 Unauthorized page
- Users see a 503 Service Unavailable page until an admin restarts the pool (Correct answer)
- The site silently redirects to the default document
- IIS automatically switches to a backup application pool
Correct answer: Users see a 503 Service Unavailable page until an admin restarts the pool
When rapid-fail protection stops an application pool, IIS returns 503 Service Unavailable for all requests to that pool until it is manually or automatically restarted.
Question 2: A network team wants to restrict IIS management traffic to specific IP ranges. Which IIS feature controls IP-based access to the Web Management Service port (8172)?
- IP Address and Domain Restrictions at the site level
- Windows Firewall inbound rule for port 8172 (Correct answer)
- IIS Manager remote connections allow list
- URL Authorization rules
Correct answer: Windows Firewall inbound rule for port 8172
A Windows Firewall inbound rule restricting port 8172 to approved source IP ranges is the most reliable way to limit remote IIS Manager access.
Question 3: A client escalates that their browser shows a certificate mismatch warning on your IIS site. What is the most likely communication root cause to investigate first?
- The SSL binding uses the wrong certificate for that hostname (Correct answer)
- The IIS application pool identity lacks read access to the cert private key
- HTTP Strict Transport Security is not enabled
- The certificate is SHA-1 signed
Correct answer: The SSL binding uses the wrong certificate for that hostname
A mismatch warning means the certificate presented does not match the hostname the browser requested, typically because the wrong certificate is bound in IIS.
Question 4: Stakeholders request that IIS serve compressed responses to reduce bandwidth costs. Which two compression types does IIS support natively?
- gzip and deflate
- Static compression and dynamic compression (Correct answer)
- Brotli and gzip
- LZ4 and zstd
Correct answer: Static compression and dynamic compression
IIS natively supports static compression (for cacheable files) and dynamic compression (for runtime-generated content) as separate installable modules.
Question 5: A compliance team asks how to prove that IIS is logging all administrative changes to site configurations. Which Windows feature records IIS configuration change events?
- IIS Configuration History folder
- Windows Security Audit log with object access auditing on applicationHost.config (Correct answer)
- IIS Manager activity log
- Web Platform Installer change log
Correct answer: Windows Security Audit log with object access auditing on applicationHost.config
Enabling Windows object access auditing on the applicationHost.config file causes every read and write to be recorded in the Windows Security event log.
Question 6: A DevOps team wants IIS to automatically communicate zero-downtime deployments by warming up the new application before accepting live traffic. Which IIS feature enables this?
- Application Initialization module (Correct answer)
- Overlap Recycling (application pool)
- ARR Server Farm health probe
- Dynamic IP Restrictions
Correct answer: Application Initialization module
The Application Initialization module sends warm-up HTTP requests to the new application instance during recycling before IIS routes live traffic to it.
Question 7: A business continuity team asks what IIS feature allows multiple servers to share the same configuration to simplify communication of changes across a farm.
- Web Deploy synchronization
- IIS Shared Configuration (centralized applicationHost.config) (Correct answer)
- Windows Server Replication
- ARR Server Farm with health probes
Correct answer: IIS Shared Configuration (centralized applicationHost.config)
IIS Shared Configuration points all farm servers to a single applicationHost.config on a UNC share, ensuring configuration changes propagate instantly to every node.
A product owner asks you to explain what happens when an IIS application pool reaches its rapid-fail protection threshold.
What is the communication effect to users?