Microsoft Internet Information Server Microsoft Internet Information Server MCQ 4 — Questions and Answers
Question 1: What does the IIS 'Failed Request Tracing' (FREB) feature capture?
- Performance counter data for all active worker processes
- Detailed trace events for requests that match defined failure conditions (Correct answer)
- A real-time stream of all HTTP headers passing through IIS
- Error messages written by applications to the Windows Event Log
Correct answer: Detailed trace events for requests that match defined failure conditions
Failed Request Tracing records a detailed event trace (including module pipeline stages, timing, and headers) for requests that meet specified failure criteria such as status codes or time thresholds.
Question 2: Which process isolation model does IIS use by default to protect the web server from application failures?
- In-process hosting where all sites share w3wp.exe
- Worker process isolation where each application pool runs in its own w3wp.exe (Correct answer)
- Kernel-mode isolation using the HTTP.sys driver only
- COM+ component services isolation
Correct answer: Worker process isolation where each application pool runs in its own w3wp.exe
By default, each IIS application pool runs in a separate w3wp.exe worker process, so a crash in one application does not affect other sites or the IIS service itself.
Question 3: What is the purpose of the 'maxAllowedContentLength' setting in IIS Request Filtering?
- It limits the size of HTTP response bodies sent to clients
- It sets the maximum size of an HTTP request body in bytes that IIS will accept (Correct answer)
- It controls the maximum length of a URL path
- It defines the maximum number of query string parameters allowed
Correct answer: It sets the maximum size of an HTTP request body in bytes that IIS will accept
maxAllowedContentLength (under requestFiltering/requestLimits) sets the maximum allowed size of the request entity body; requests exceeding this limit are rejected with a 413 error.
Question 4: In IIS, which HTTP status code is returned when a client is denied access due to IP address restrictions?
- 401 Unauthorized
- 403 Forbidden (Correct answer)
- 404 Not Found
- 503 Service Unavailable
Correct answer: 403 Forbidden
IIS returns 403 Forbidden when a client's IP address is blocked by the IP Address and Domain Restrictions feature, indicating the server understood the request but refuses to fulfill it.
Question 5: What is the function of the HTTP.sys kernel-mode driver in IIS?
- It compiles ASP.NET code into native machine code
- It handles low-level HTTP request parsing and response caching in the Windows kernel (Correct answer)
- It manages application pool identity tokens and security contexts
- It routes requests between application pools based on load
Correct answer: It handles low-level HTTP request parsing and response caching in the Windows kernel
HTTP.sys is a kernel-mode driver that listens on the network stack, performs HTTP request parsing, and implements a kernel-mode response cache to improve performance.
Question 6: Which IIS configuration section controls the list of default documents returned when a client requests a directory without specifying a filename?
- <httpErrors>
- <defaultDocument> (Correct answer)
- <staticContent>
- <directoryBrowse>
Correct answer: <defaultDocument>
The <defaultDocument> section in web.config or applicationHost.config defines the ordered list of filenames (e.g., index.html, default.aspx) that IIS looks for when serving a directory request.
Question 7: What does enabling 'WebSocket Protocol' support in IIS allow web applications to do?
- Serve static files over UDP for faster delivery
- Establish persistent, full-duplex communication channels between clients and servers (Correct answer)
- Compress WebSocket frames using DEFLATE automatically
- Authenticate WebSocket connections using Kerberos tokens
Correct answer: Establish persistent, full-duplex communication channels between clients and servers
The WebSocket Protocol feature in IIS enables bi-directional, long-lived connections over a single TCP connection, allowing real-time server-push scenarios like chat or live dashboards.
What does the IIS 'Failed Request Tracing' (FREB) feature capture?