Microsoft Internet Information Server Professional Standards & Competencies 4

Question 1

An IIS admin is asked to implement content security policy headers to prevent XSS attacks. Where should these headers be added?

Accepted Answer

As HTTP response headers in IIS Manager or web.config <customHeaders>

Answer

HTTP response headers such as Content-Security-Policy are configured in IIS Manager's HTTP Response Headers feature or the web.config <customHeaders> element.

Question 2

A web server professional must limit the maximum allowed HTTP request size to prevent buffer overflow attacks on an IIS server. Which setting controls this?

Accepted Answer

maxRequestEntityAllowed in <requestFiltering>

Answer

The maxRequestEntityAllowed attribute in the <requestFiltering> element limits the maximum allowed size of the HTTP request body.

Question 3

Which professional monitoring approach helps detect memory leaks in an IIS-hosted application before they cause production outages?

Accepted Answer

Monitor the w3wp.exe process memory counters in Performance Monitor

Answer

Tracking the w3wp.exe private bytes counter in Performance Monitor reveals growing memory consumption indicative of leaks before they cause crashes.

Question 4

An IIS administrator must configure WebDAV and ensure only authenticated users can publish content. Which two settings are required?

Accepted Answer

Enable WebDAV and set authoring rules to allow specific roles with authentication required

Answer

WebDAV authoring rules must restrict publishing to authenticated roles, and Windows Authentication must be enabled to prevent anonymous publishing.

Question 5

Which IIS feature should a professional configure to automatically restart a worker process that stops responding, ensuring application resilience?

Accepted Answer

Application pool ping settings (ping enabled, ping maximum response time)

Answer

Application pool ping settings detect unresponsive worker processes and automatically recycle them when they fail to respond within the configured interval.

Microsoft Internet Information Server Practice Test

Microsoft Internet Information Server Practice Test

Microsoft Internet Information Server Professional Standards & Competencies 4