Microsoft Internet Information Server Research & Evidence-Based Practice 5

Question 1

A researcher studying IIS application pool isolation wants evidence of memory separation between two sites. Which process tool verifies they run in separate w3wp.exe instances?

Accepted Answer

Task Manager or Process Explorer showing separate w3wp PIDs per pool

Answer

Task Manager or Sysinternals Process Explorer shows distinct w3wp.exe process IDs for each application pool, confirming true process-level isolation.

Question 2

Which evidence-based practice should be followed before applying a CIS Benchmark hardening script to an IIS production server?

Accepted Answer

Test in a staging environment and review each setting against the application's requirements

Answer

CIS Benchmarks include settings that may break application functionality; staging validation against application-specific requirements prevents unplanned outages.

Question 3

Which IIS log analysis tool, free from Microsoft, can parse W3C logs and produce visual evidence of request distribution, error rates, and top URLs?

Accepted Answer

Log Parser 2.2 with Log Parser Studio

Answer

Microsoft Log Parser 2.2 with the Log Parser Studio GUI allows SQL-like queries against W3C log files and generates charts as visual evidence for analysis.

Question 4

When researching IIS handler mapping security, which approach provides evidence that unnecessary handlers (like .asp legacy) are disabled?

Accepted Answer

Query IIS handler mappings via appcmd list config /section:handlers and audit the list

Answer

Using appcmd to list configured handlers outputs the complete handler mapping table, providing documented evidence for the security audit trail.

Question 5

A researcher is validating that IIS output caching is effective. Which Performance Monitor counter provides the most direct evidence of cache hit rate?

Accepted Answer

Web Service Cache\Kernel: URI Cache Hits %

Answer

The 'Kernel: URI Cache Hits %' counter in the Web Service Cache object reports the percentage of requests served from HTTP.sys kernel cache versus hitting the worker process.

Microsoft Internet Information Server Practice Test

Microsoft Internet Information Server Practice Test

Microsoft Internet Information Server Research & Evidence-Based Practice 5