Microsoft Internet Information Server Research & Evidence-Based Practice 3

Question 1

Which Microsoft documentation source provides the definitive, evidence-based list of IIS HTTP status code subcodes (e.g., 404.1, 404.2)?

Accepted Answer

Microsoft Support Article KB943891

Answer

KB943891 on the Microsoft Support site is the authoritative reference listing IIS-specific HTTP status subcodes and their meanings for troubleshooting.

Question 2

A researcher comparing IIS application pool recycling events wants to correlate them with application errors. Which Windows log should they query?

Accepted Answer

Application Event Log under source 'WAS'

Answer

Windows Activation Service (WAS) writes application pool lifecycle events including recycles to the Application Event Log, providing a timeline for correlation.

Question 3

Which PowerShell module provides cmdlets that allow researchers to programmatically query and export IIS configuration as evidence of current state?

Accepted Answer

WebAdministration

Answer

The WebAdministration module exposes the IIS configuration hierarchy through cmdlets like Get-WebSite and Get-WebConfiguration, enabling scripted auditing.

Question 4

When researching TLS configuration hardening for IIS, which registry hive path is the evidence-based location where SSL/TLS protocol version support is controlled?

Accepted Answer

HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols

Answer

The SCHANNEL\Protocols registry path is where administrators enable or disable specific TLS/SSL versions on Windows Server, including for IIS.

Question 5

A research team needs to verify that an IIS server's response headers do not leak version information. Which tool provides the most direct evidence by capturing raw HTTP headers?

Accepted Answer

Fiddler or curl --head

Answer

Tools like Fiddler or curl --head capture the raw HTTP response headers sent by the server, providing direct evidence of what version information is exposed.

Microsoft Internet Information Server Practice Test

Microsoft Internet Information Server Practice Test

Microsoft Internet Information Server Research & Evidence-Based Practice 3