Microsoft Internet Information Server Research & Evidence-Based Practice 2

Question 1

Which IIS log file format includes the most fields by default and is recommended for detailed forensic analysis?

Accepted Answer

W3C Extended Log Format

Answer

W3C Extended Log Format is the IIS default and offers selectable fields including cs-uri-stem, sc-status, time-taken, and more, making it best for forensic research.

Question 2

A researcher wants to identify slow page load trends over 30 days using IIS logs. Which field should they primarily analyze?

Accepted Answer

time-taken

Answer

The time-taken field records milliseconds to serve each request, making it the key metric for identifying slow-loading resources over time.

Question 3

Which built-in Windows tool can be used to benchmark IIS throughput by simulating multiple concurrent HTTP requests?

Accepted Answer

WCAT (Web Capacity Analysis Tool)

Answer

WCAT is Microsoft's purpose-built HTTP load-testing utility that simulates concurrent clients against IIS to gather evidence-based capacity data.

Question 4

When analyzing IIS Failed Request Tracing logs to diagnose a 500 error, what key piece of evidence does the trace provide that standard logs do not?

Accepted Answer

The exact module and notification where the failure occurred

Answer

Failed Request Tracing captures the full IIS pipeline path and identifies the specific module and event that triggered the failure, far beyond what status codes reveal.

Question 5

Which Performance Monitor counter should a researcher use as primary evidence that IIS worker processes are under memory pressure?

Accepted Answer

Process(w3wp)\Private Bytes

Answer

Private Bytes for the w3wp process tracks memory exclusively held by the worker process, providing direct evidence of memory growth or leaks.

Microsoft Internet Information Server Practice Test

Microsoft Internet Information Server Practice Test

Microsoft Internet Information Server Research & Evidence-Based Practice 2