Microsoft Internet Information Server Professional Standards & Competencies 5

Question 1

An IIS professional is conducting a post-incident review after a web defacement. Which IIS log analysis skill is most relevant to determine how the attacker gained access?

Accepted Answer

Reviewing W3C access logs for unusual HTTP PUT or POST requests with suspicious user-agents

Answer

W3C access logs record HTTP method, URI, user-agent, and status codes, which can reveal unauthorized PUT/POST requests used for defacement.

Question 2

Which IIS competency involves configuring health check URLs so that an upstream load balancer can automatically remove a failing IIS node from rotation?

Accepted Answer

Application Request Routing (ARR) health check probe configuration

Answer

ARR's server farm health check configuration defines a probe URL and interval, allowing ARR to remove unhealthy IIS servers from the load-balanced pool.

Question 3

A professional IIS deployment uses HTTPS exclusively. Which HTTP response header should be added to prevent browsers from ever connecting over plain HTTP again?

Accepted Answer

Strict-Transport-Security: max-age=31536000; includeSubDomains

Answer

The HTTP Strict Transport Security (HSTS) header instructs browsers to always use HTTPS for the specified duration, preventing downgrade attacks.

Question 4

When an IIS server is deployed in a DMZ, which professional network security practice should accompany the IIS hardening effort?

Accepted Answer

Apply host-based firewall rules allowing only ports 80 and 443 inbound and restrict outbound connections

Answer

DMZ servers should have host-based firewalls permitting only required inbound ports and restricting outbound to minimize attack surface.

Question 5

An IIS administrator is asked to prove that the web server configuration matches the CIS IIS benchmark. Which tool automates this compliance check?

Accepted Answer

Microsoft Security Compliance Toolkit or CIS-CAT scanner

Answer

CIS-CAT and the Microsoft Security Compliance Toolkit can automatically assess whether IIS configuration meets CIS benchmark or Microsoft security baseline requirements.

Microsoft Internet Information Server Practice Test

Microsoft Internet Information Server Practice Test

Microsoft Internet Information Server Professional Standards & Competencies 5