Microsoft Internet Information Server Risk Assessment & Management 2

Question 1

Which IIS feature should be disabled to reduce the attack surface related to directory traversal risks?

Accepted Answer

Directory Browsing

Answer

Directory Browsing exposes the file system structure to attackers; disabling it is a core hardening step to reduce directory traversal risk.

Question 2

What is the purpose of enabling Failed Request Tracing (FREB) in IIS from a risk management perspective?

Accepted Answer

Diagnosing and documenting error conditions for risk analysis

Answer

FREB captures detailed diagnostics for failed requests, helping administrators identify vulnerabilities and assess risk patterns.

Question 3

An IIS server is exposed to a Slowloris denial-of-service attack. Which setting in Request Filtering best mitigates this risk?

Accepted Answer

Request timeout settings via connectionTimeout

Answer

Lowering connectionTimeout forces slow or idle connections to drop, mitigating Slowloris-style attacks that hold connections open.

Question 4

Which built-in IIS authentication method poses the highest risk of credential exposure over unencrypted connections?

Accepted Answer

Basic Authentication

Answer

Basic Authentication transmits credentials as Base64-encoded plaintext, making interception trivial without TLS encryption.

Question 5

When performing a risk assessment on IIS, which log field is most critical for detecting IP-based brute force attacks?

Accepted Answer

c-ip

Answer

The c-ip field records the client IP address, enabling analysts to identify repeated failed authentication attempts from the same source.

Microsoft Internet Information Server Practice Test