1. You install the Web Server (IIS) server role on a server that runs Windows Server 2008 R2.

You configure a Web site named contoso.com and a Web application named Acctg on the Web
server.
The Web server runs out of disk space.
You move Acctg to another drive on the Web server.
The following table shows the current application configuration:
Users report that they cannot access Acctg.
You need to enable users to access Acctg.
Which command should you run on the server?
A. appcmd add app /site.name: contoso /path:/Acctg /physicalPath:d:\Acctg
B. appcmd add app /site.name: contoso /path:/Acctg /physicalPath:f:\Acctg
C. appcmd set app /site.name: contoso /path:/Acctg /physicalPath:d:\Acctg
D. appcmd set app /site.name: contoso /path:/Acctg /physicalPath:f:\Acctg
Answer: D
2.Your network contains an SMTP server named server1.contoso.com that runs Windows Server
2008 R2.
You run telnet.exe server1.contoso.com 25 and successfully connect to Server1.
You restart Server1.
You run telnet.exe server1.contoso.com 25 again and fail to connect to Server1.
You need to ensure that you can connect to the SMTP service on Server1.
What should you modify first?
A. the access control settings of the SMTP Virtual Server
B. the properties of the Simple Mail Transfer Protocol (SMTP) service
C. the security settings of the SMTP Virtual Server
D. Windows Firewall on Server1
Answer: B
Section: Internet Information Server (IIS)

3. You install the Web Server (IIS) server role on a new server that runs Windows Server 2008
R2.
You install a Microsoft .NET Framework 1.0 application on a Web site on the Web server.
The company security policy states that all applications must run by using the minimum level of
permission.
You need to configure the Web site application so that it has the permissions to execute without
creating any other content and without accessing any operating system components.
What should you do?
A. Set the .NET Framework trust level to Full for the Web site.
B. Set the .NET Framework trust level to Low for the Web site.

C. Set the .NET Framework trust level to High for the Web site.
D. Set the .NET Framework trust level to Medium for the Web site.
Answer: A
4. You have a Windows Server 2008 R2 server that has the Web Server (IIS) server role installed.
The server contains a Web site.
You need to ensure that the cookies sent from the Web site are encrypted on users' computers.
Which Web site feature should you configure?
A. Authorization Rules
B. Machine Key
C. Pages and Controls
D. SSL Settings
Answer: B
5. You install the Web Server (IIS) server role on a new server that runs Windows Server 2008
R2.
You install a Microsoft .NET Framework 1.0 application on a Web site on the Web server.
The company security policy states that all applications must run by using the minimum level of
permission.
You need to configure the Web site application so that it has the permissions to execute without
creating any
other content and without accessing any operating system components.
What should you do?
A. Set the .NET Framework trust level to Full for the Web site.
B. Set the .NET Framework trust level to Low for the Web site.
C. Set the .NET Framework trust level to High for the Web site.
D. Set the .NET Framework trust level to Medium for the Web site.
Answer: A
6. You have the Web Server (IIS) server role installed on a server that runs Windows Server 2008
R2.
You create a Web site named contoso.com.
You copy an application named WebContent to the server.
You need to enable the WebContent application on the Web site.
What should you do?
A. At the command prompt on the server, run the appcmd add site command.
B. At the command prompt on the server, run the appcmd add vdir command.
C. Select the Web site from the Internet Information Services (IIS) Manager console. Select Add
Application.
D. Select the Web site from the Internet Information Services (IIS) Manager console. Select Add
Virtual Directory.
Answer: C
7. Your network contains a Windows Server 2008 R2 server that has the Web Server (IIS) server
role installed.
You have a Web application that uses a custom application pool.

The application pool is set to recycle every 1,440 minutes.

The Web application does not support multiple worker processes.
You need to configure the application pool to ensure that users can access the Web application
after the application pool is recycled.
What should you do?
A. Set the Shutdown Executable option to True.
B. Set the Process Orphaning Enabled option to True.
C. Set the Disable Overlapped Recycle option to True.
D. Set the Disable Recycling for Configuration Changes option to True.
Answer: C

8. You install the Web Server (IIS) server role on two servers named Server1 and Server2.
The servers run Windows Server 2008 R2.
Your company has a Web site named www.contoso.com hosted on Server1.
The Web site is due for maintenance. The Web content must be available during maintenance.
You create a mirror Web site located on Server2.
You need to configure the www.contoso.com site to redirect requests to Server2.
What should you do first?
A. Run the appcmd set config /section:httpRedirect /enabled:true command.
B. Run the appcmd set config /section:httpRedirect /enabled:false command.
C. Run the appcmd set site /site.name:contoso /-bindings.[protocol='http',www.contoso.com]
command.
D. Run the appcmd set site /site.name:contoso /+bindings.
[protocol='http',www1.contoso.com]
command.
Answer: A
9.You install the Web Server (IIS) on a server that runs Windows Server 2008 R2.
You install a Microsoft .NET Framework application on a Web site that is hosted on the server in
a folder named \wwwroot.
The .NET Framework application must write to a log file that resides in the \Program
Files\WebApp folder.
You need to configure the .NET Framework trust level setting for the Web site so that the
application can write to the log file.
What should you do?
A. Set the .NET Framework trust level to Full for the Web site.
B. Set the .NET Framework trust level to High for the Web site.
C. Set the .NET Framework trust level to Minimal for the Web site.
D. Set the .NET Framework trust level to Medium for the Web site.
Answer: D
10.You have a server that runs Windows Server 2008 R2.

The server has the Web Server (IIS) server role and the FTP Service role service installed.
You add a new FTP site to the server.
You need to ensure that the new FTP site is available.
What are two possible ways to achieve this goal? (Each correct answer presents a complete
solution. Choose
two.)
A. Run the iisreset command on the server.
B. Configure an alternate TCP port in the FTP site properties.
C. Configure an alternate IP address in the FTP site properties.
D. Configure a host header file in the default Web site properties.
E. Configure an alternate IP address in the default Web site properties.
Answer: BC
11. You have a Windows Server 2008 R2 server that has the Web Server (IIS) server role
installed.
The server hosts multiple Web sites.
You need to configure the server to automatically release memory for a single Web site.
You must achieve this goal without affecting the other Web sites.
What should you do?
A. Create a new Web site and edit the bindings for the Web site.
B. Create a new application pool and associate the Web site to the application pool.
C. Create a new virtual directory and modify the Physical Path Credentials on the virtual
directory.
D. From the Application Pool Defaults, modify the Recycling options.
Answer: B

12. You install the Web Server (IIS) server role on a new server that runs Windows Server 2008
R2.
You install a Microsoft .NET Framework application on a Web site on the Web server.
The application launches a process that presents a real-time graphical report to the Web browser
and creates a text report file on the hard disk drive.
The company security policy states that the application must not perform any of the following
tasks:
Write to the event log.
Access Open Database Connectivity (ODBC) data sources.
Make network or Web service calls.
You need to configure the Web site so that the application can be executed. You must ensure that
the
application meets the outlined security requirements.
What should you do?
A. Set the .NET Framework trust level to Full for the Web site.
B. Set the .NET Framework trust level to Low for the Web site.
C. Set the .NET Framework trust level to High for the Web site.

D. Set the .NET Framework trust level to Medium for the Web site.
Answer: D
13. You have a server that runs Windows Server 2008 R2. The server has the Web Server (IIS)
server role installed.
The server contains a Web site that is configured to use only Windows Authentication.
You have a security group named Group1 that contains several user accounts.
You need to prevent the members of Group1 from accessing a Web site.
You must not prevent other users from accessing the Web site.
Which Web site feature should you configure?
A. Authentication
B. Authorization Rules
C. IIS Manager Permissions
D. SSL Settings
Answer: B

14. Your network contains a Web server that runs Windows Server 2008 R2.
The server has a Web site named Site1.
You need to ensure that Web developers can update the Web content on Site1 by using HTTP.
What should you do first?
A. Modify the Feature Delegation settings.
B. Install the ASP Web Server (IIS) role service.
C. Install the WebDAV Publishing Web Server (IIS) role service.
D. Modify the Microsoft ASP.NET pages and control settings for the Web site.
Answer: C
15. Your network contains a Web site named Web1.
Web1 is configured to use an application pool named AppPool1.
You need to ensure that the memory used by the Web site is released every 12 hours.
The solution must minimize the amount of downtime for the Web site.
What should you do?
A. Modify the recycling settings for AppPool1.
B. Modify the session state settings for Web1.
C. Create a scheduled task that runs tskill.exe w3svc.exe.
D. Create a scheduled task that runs iisreset.exe /noforce.
Answer: A
16. You plan to stream media content over the Internet.
You need to configure PlayReady DRM to support HTTP streaming.
What should you install?
A. Microsoft IIS Media Services
B. Microsoft Office Communications Server

C. Microsoft SharePoint Foundation 2010

D. Streaming Media Services
Answer: A
17. Your network contains a server named Server1 that runs Windows Server 2008 R2.
Server1 has the SMTP Server feature installed and has one SMTP Virtual Server named SMTP1.
You need to configure Server1 to meet the following requirements:
Relay email messages for contoso.com.
Relay email messages for nwtraders.com.
Prevent the relaying of email messages to other domains.
What should you do?
A. Configure two alias domains to SMTP1.
B. Configure two remote domains to SMTP1.
C. Modify the relay restrictions list of SMTP1.
D. Modify the connection control settings of SMTP1.
Answer: B

18.Your network contains a Web server that runs Windows Server 2008 R2.
You create an IIS Manager User account for a user named User1.
When you attempt to delegate permissions for the Default Web Site to User1, you receive the
following dialog box. You need to ensure that you can delegate permissions for the Default Web
Site to User1.
Which feature should you modify?
A. Feature Delegation
B. IIS Manager Permissions
C. IIS Manager Users
D. Management Service
Answer: D
19. Your network contains a Web server that runs Windows Server 2008 R2.
You need to generate a report for each Active Server Page (ASP) that takes more than two
seconds to process.
What should you use?
A. Reports in Performance Monitor
B. Data Collector Sets (DCSs) in Performance Monitor
C. Logging in Internet Information Services (IIS) Manager
D. Failed Request Tracing Rules in Internet Information Services (IIS) Manager
Answer: D

20. You install all of the Web Server (IIS) role services on a server named Server1.

You configure the Default Web Site to assign the IIS Manager Permissions for the site to a user
named User1.
From a different computer, User1 attempts to connect to the Default Web Site on Server1 by
using Internet Information Services (IIS) Manager and receives the following error message.
You need to ensure that User1 can use Internet Information Services (IIS) Manager to remotely
administer the Default Web Site on Server1.
What should you do first?
A. From the Internet Information Services (IIS) Manager console, configure the Feature
Delegation feature.
B. From the Internet Information Services (IIS) Manager console, configure the Management
Service feature.
C. From the Services console, modify the properties of the Web Management Service service.
D. From the Services console, modify the properties of the Windows Remote Management
(WSManagement) service.
Answer: B
21. Your network contains a Web server named Web1 that runs Windows Server 2008 R2.
You import an SSL certificate to Web1.
You need to enable SSL encryption for the Web site.
What should you do?
A. Add a new binding to the Web site.
B. Modify the Server Certificates settings.
C. Configure the handler mappings for the Web site.
D. Configure the Machine Key feature for the Web site.
Answer: A
22. Your network contains a Web server.
You need to ensure that users can only access files that have the .htm, .html, .asp, and .aspx file
extensions.
What should you do?
A. Add an authorization rule.
B. Modify the handler mappings.
C. Update the default documents list.
D. Configure the request filtering settings.
Answer: D
23. Your network contains a Web server that runs Windows Server 2008 R2.
The Web server has the Client Certificate Mapping Authentication role service installed.
You create a Web site that requires client certificates for authentication.
You need to enable client certificate mapping for the Web site.
Which tool should you use?
A. Appcmd
B. Certutil

C. the Authorization Manager snap-in

D. the Certificates snap-in
Answer: A
24. Your network contains a server named Server1 that runs Windows Server 2008 R2.
Server1 has the Streaming Media Services role and the Web Server (IIS) role installed.
Server1 hosts the company's intranet Web site.
You need to configure Windows Media Services to stream content by using HTTP.
What should you do first?
A. Install the RPC over HTTP proxy server feature.
B. Configure a host header for the intranet Web site.
C. Configure the server to have an additional IP address.
D. Create a new virtual directory on the intranet Web site.
Answer: C
25. Your network contains a server named Server1 that runs Windows Server 2008 R2.
Server1 has the Streaming Media Services role installed.
You discover that anonymous users can access video content stored on Server1.
You need to ensure that user access to videos on the server requires authentication.
What should you do?
A. From the Windows Media Services console, configure the Authorization properties.
B. From the Windows Media Services console, configure the Authentication properties.
C. From Internet Information Services (IIS) Manager, configure the Authentication settings.
D. From Internet Information Services (IIS) Manager, configure the .Net Authorization Rules
settings.
Answer: B
26.Your network contains a Web server that runs Windows Server 2008 R2.
You need to back up all Web site content.
Which tool should you use?
A. Appcmd
B. Internet Information Services (IIS) Manager
C. Internet Information Services (IIS) 6.0 Manager
D. Wbadmin
Answer: D
27. Your network contains a Web server named Web1 that runs Windows Server 2008 R2.
Web1 has a wildcard certificate installed.
Web1 has two Web sites as shown.
You discover that when you go to the URL https://site1.contoso.com in Internet Explorer, you
connect to Site2.
You need to ensure that when users go to https://site1.contso.com in Internet Explorer, they
connect to Site1.

The solution must ensure that all connections to Site1 are secure. Which two settings should you
modify?
(Each correct answer presents part of the solution. Choose two.)
A. the bindings for Site1
B. the bindings for Site2
C. the HTTP Redirect settings for Site1
D. the HTTP Redirect settings for Site2
Answer: AB
28.Your network contains a Web server that runs Windows Server 2008 R2.
The server has two Web sites named Site1 and Site2.
Site1 is accessed by using the name site1.contoso.com.
Site2 is accessed by using the name site2.contoso.com.
You plan to configure both Web sites to use SSL encryption.
You need to ensure that users can access Site1 by using the URL https://site1.contoso.com and
Site2 by using the URL https://site2.contoso.com.
What should you configure for each Web site?
A. a different application pool
B. a different host header site binding
C. a different IP address site binding
D. a different port site binding
Answer: C

29. Your network contains a server named Server1 that runs Windows Server 2008 R2.
Server1 has the Streaming Media Services role and the Web Server (IIS) role installed.
You have a confidential media file.
You need to ensure that the media file streams are encrypted.
Which protocol should you configure?
A. HTTPS
B. IPSec
C. Microsoft Media Server (MMS)
D. real-time streaming protocol (RTSP)
Answer: B
30. Your company has a server that runs Windows Server 2008 R2.
The server has the Web Server (IIS) server role installed.
You need to activate SSL for the default Web site.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)
A. Obtain and import a server certificate by using the IIS Manager console.
B. Select the Generate Key option in the Machine Key dialog box for the default Web site.

C. Add bindings for the HTTPS protocol to the default Web site by using the IIS Manager
console.
D. Install the Digest Authentication component for the Web server role by using the Server
Manager console.
Answer: AC
31. Your network contains a server named Server1 that runs Windows Server 2008 R2.
Server1 has the Streaming Media Services role and the Web Server (IIS) role installed.
Server1 has a broadcast publishing point named Broadcast1.
Broadcast1 publishes a file named Broadcast1.wmv.
You run the Unicast Announcement Wizard for Broadcast1 and create a new announcement file.
You need to ensure that only authorized users have permission to access the announcement file.
What should you modify?
A. the Authentication settings for Broadcast1
B. the Authorization settings for Broadcast1
C. the NTFS permissions on c:\inetpub\wwwroot\Broadcast1.asx
D. the NTFS permissions on c:\wmpub\wmroot\Broadcast1.wmv
Answer: C
32. Your network contains a server that runs Windows Server 2008 R2.
The server has the Web Server (IIS) role installed.
The server has a Web application that uses HTTP.
All authentication methods are enabled for the Web application.
You need to prevent passwords from being sent over the network in clear text.
Which two authentication methods should you disable? (Each correct answer presents part of the
solution.
Choose two.)
A. Anonymous
B. Basic
C. Digest
D. Forms
E. Windows Integrated
Answer: BD
33. You create a managed service account.
You need to configure a Web application pool to use the managed service account.
What should you do first?
A. Add the account to the IIS_IUSRS group.
B. Run the New-WebServiceProxy cmdlet.
C. Run the Install-ADServiceAccount cmdlet.
D. Modify the permissions of the computer account.
Answer: C

34. Your network contains a Web server that runs Windows Server 2008 R2.
Remote management is configured for Internet Information Services (IIS).
From IIS Manager Permissions, you add a user to a Web site.
You need to prevent the user from using Internet Information Services (IIS) Manager to modify
the authorization rules of the Web site.
Which settings should you configure?
A. Authorization Rules
B. Feature Delegation
C. IIS Manager Permissions
D. IIS Manager Users
Answer: B
35. You network contains an Active Directory domain named contoso.com.
The domain contains an FTP server named Server1.
You create a domain user account named User1.
You create an FTP site on Server1 and configure the site to use a host name of
public.contoso.com.
You need to log on to the FTP site as User1.
What should you specify as the username?
A. contoso.com\user1
B. public.contoso.com|user1
C. user1
D. [email protected]
Answer: B
36. Your network contains an SMTP server that runs Windows Server 2008 R2.
You need to ensure that all mail for contoso.com is routed through a smart host named
mail.contoso.com.
All other mail must be routed by using DNS name resolution.
What should you configure?
A. a new SMTP domain
B. the Advanced delivery options
C. the Messages options
D. the Outbound connections options
Answer: A
37. Your network contains a Web server named Server1 that runs Windows Server 2008 R2.
You modify the configuration of Server1.
You need to restore the previous Web server configuration.
What should you run?
A. appcmd.exe
B. iisback.vbs
C. iisext.vbs
D. iisreset.exe
Answer: A

38. Your network contains an FTP server named Server1.

Server1 has an FTP site named FTP1.
You need to hide all of the files in FTP1 that have an .exe file extension.
The solution must ensure that users can list other files in FTP1.
What should you modify?
A. the FTP authorization rules
B. the FTP directory browsing
C. the FTP request filtering
D. the NTFS permissions
Answer: C
39. Your network contains a Web server that runs a Server Core installation of Windows Server
2008 R2.
You need to install the ASP.NET feature on the server.
What should you run?
A. appcmd.exe
B. dism.exe
C. sconfig.cmd
D. slmgr.vbs
Answer: B
Section: Internet Information Server (IIS)
40. Your network contains a Web server that runs Windows Server 2008 R2.
Users can connect to the Default Web Site.
You create a new Web site and assign the site a host header.
Users cannot connect to the new Web site by using the host header.
You need to ensure that users can connect to the new Web site by using the host header.
What should you do?
A. Create an Alias (CNAME) record in DNS for the host header.
B. Create a service location (SRV) record in DNS for the host header.
C. Modify the Windows Firewall configuration on the Web server.
D. Modify the Windows Firewall configuration on the users' computers.
Answer: A
41. Your network contains an FTP server that runs Windows Server 2008 R2.
You create an FTP site on the server and allow Read access for all users.
You create an IIS Manager user account for a user named User1.
You need to ensure that User1 can connect to the FTP site.
What should you do?
A. Enable FTP user isolation.
B. Enable Basic authentication.
C. Add an FTP authorization rule.
D. Add a custom provider for FTP authentication.
Answer: D

42. Your network contains two Web servers that run Windows Server 2008 R2.
Each Web server hosts three Web sites.
You need to see the number of active connections to each Web site in a consolidated view.
Which tool should you use?
A. Internet Information Services (IIS) Manager
B. Performance Monitor
C. Resource Monitor
D. Task Manager
Answer: B
43. Your network contains two standalone servers named Server1 and Server2.
Server1 has Microsoft SQL Server 2008 Reporting Services installed.
Server2 has the SMTP Server feature installed.
You configure the Reporting Services on Server1 to send reports by using Server2.
You need to ensure that Server2 sends the reports.
What should you do on Server2?
A. Configure a smart host.
B. Configure TLS encryption.
C. Modify the Relay restrictions settings.
D. Modify the Connection control settings.
Answer: C
44. Your network contains a Web server that runs Windows Server 2008 R2.
The Web server contains 100 application pools.
You need to identify which application pool is using the most CPU resources.
Which tool should you use?
A. Appcmd
B. Internet Information (IIS) Manager
C. Resource Monitor
D. Task Manager
Answer: B
45. Your network contains a Web server that runs Windows Server 2008 R2.
The Web server has a Web site named Web1.
Web1 hosts several HTML Web pages located in the C:\inetpub\wwwroot folder.
Windows authentication is enabled for Web1.
You need to prevent some users from accessing one of the HTML Web pages.
What should you do?
A. From Windows Explorer, modify the NTFS permissions.
B. From Windows Explorer, modify the share permissions.
C. From Internet Information Services (IIS) Manager, modify the Authentication settings.
D. From Internet Information Services (IIS) Manager, modify the Request Filtering settings.
Answer: A

46. Your network contains an FTP server that runs Windows Server 2008 R2.
You need to prevent FTP users from viewing all folders named _private.
What should you configure?
A. FTP Authorization Rules
B. FTP Directory Browsing
C. FTP IPv4 Address and Domain Restrictions
D. FTP Request Filtering
Answer: D
47. Your network contains a server named Server1 that runs Windows Server 2008 R2.
Server1 has the SMTP Server feature installed and has one SMTP Virtual Server named SMTP1.
You need to configure Server1 to meet the following requirements:
Relay email messages for contoso.com.
Relay email messages for nwtraders.com.
Prevent the relaying of email messages to other domains.
What should you do?
A. Configure two alias domains to SMTP1.
B. Configure two remote domains to SMTP1.
C. Modify the relay restrictions list of SMTP1.
D. Modify the connection control settings of SMTP1.
Answer: B
48. Your network contains a Web server that runs Windows Server 2008 R2.
The server contains 10 Web sites.
You need to back up the Microsoft ASP.NET configuration settings of one Web site.
The solution must minimize the size of the backup.
What should you do?
A. Perform a system state backup.
B. Copy the Web.config file.
C. Copy the ApplicationHost.config file.
D. Copy the %systemdrive%\inetpub folder.
Answer: B
50. Your network contains a Web server named Server1 that runs Windows Server 2008 R2.
Server1 contains a Web site named Web1.
Users access Web1 by using the URL http://www.contoso.com.
You plan to request a SSL certificate for Web1 from a trusted certification authority (CA).
You need to create a certificate request for Web1.
The solution must ensure that users do not receive certificate related error messages when they
access the
Web site.
What should you specify as the common name value in the certificate request?
A. server1.contoso.com
B. web1

C. www
D. www.contoso.com
Answer: D
51. Your network contains an FTP server that runs Windows Server 2008 R2.
You need to configure SSL security for the FTP connections.
The solution must meet the following requirements:
All user names and passwords must be encrypted.
The anonymous user identity must be allowed to establish a connection without requiring
encryption.
What should you configure?
A. the Control Channel setting to Allow
B. the Control Channel setting to Require only for credentials
C. the Data Channel setting to Allow
D. the Data Channel setting to Require
Answer: B
52. Your network contains a Web server that runs Windows Server 2008 R2.
The Web server contains 100 application pools.
You need to identify which application pool is using the most CPU resources.
Which tool should you use?
A. Appcmd
B. Internet Information (IIS) Manager
C. Resource Monitor
D. Task Manager
Answer: B
53. Your network contains two servers named Server1 and Server2 that run Windows Server
2008 R2.
Server1 has the Web Server (IIS) role installed.
Server2 has the File Services role installed.
Server1 has a Web site named Web1.
Server2 has a shared folder named Share1.
You need to give users Web access to the content in Share1.
What should you do on Server1?
A. Modify the connection strings of Web1 and enable directory browsing on Web1.
B. Modify the connection strings of Web1 and configure the default document of Web1.
C. Add a virtual directory to Web1 and enable directory browsing on the virtual directory.
D. Add a virtual directory to Web1 and configure the default document of the virtual directory.
Answer: C
54. Your network contains a Web server.
The Web server is configured as shown in the following table.
Site1 fails intermittently.
You need to isolate Site1 from the other sites.

What should you do?

A. Assign Site1 to a new application pool.
B. Add a managed handler to the Handler Mappings of Site1.
C. Install and configure Windows System Resource Manager (WSRM).
D. Upgrade the Site1 applications to use .NET Framework version 2.0.
Answer: A
55.
Your network contains a Web server that runs Windows Server 2008 R2.
The server has a single IP address.
You plan to create several Web sites.
You need to ensure that each Web site is accessible over TCP port 80.
What should you configure?
A. the application pools for the server
B. the bindings for each site
C. the ISAPI Filters for each site
D. the Request Filtering settings for the server
Answer: B
56. Your network contains a Web server that runs Windows Server 2008 R2.
You need to log all of the configuration changes made from Internet Information Services (IIS)
Manager.
Which tool should you use?
A. Appcmd
B. Event Viewer
C. Netsh
D. Performance Monitor
Answer: A
57. Your network contains a Web site.
The Web site contains a configuration file named Site1.config.
You need to prevent users from accessing Site1.config through the Web site.
Which Internet Information Services (IIS) feature should you configure for the site?
A. Directory Browsing
B. HTTP Response Headers
C. ISAPI Filters
D. Request Filtering
Answer: D
58. Your network contains an Active Directory domain named fabnkam.com. The domain
contains a Web Server
named Web1 that runs Windows Server 2008 R2.
You create a new site named Site1.
You need to ensure that when a user enters a URL on site1 for a resource that does not exist, a
custom web

page displays.
Which feature should you configure?
Ensure Success with 100% Guarantee Pass - Certify-me.co.uk Microsoft 70-643 Exam
A. Default Document
B. Error Pages
C. HTTP Redirect
D. Authorization Rules
Answer: B
59. Your network contains an Active Directory domain named fabrikam.com. The domain
contains a Web server
named Web1 that runs Windows Server 2008 R2.
You have a Web site named Corp. The content on Corp is stored on a FAT32 partition. Corp
contains a Web
page named Test.html.
You need to ensure that only a user named Devi can access Test.html from the Corp Web site. All
of the other
content on Corp must be accessible to everyone.
Which feature should you configure?
A. Feature Delegation
B. Authorization Rules
C. IP Address and Domain Restrictions
D. Manager Permissions
Answer: B
60. Your network contains an Active Directory domain named fabnkam.com. The domain
contains a Web server
named Web1 that runs Windows Server 2008 R2.
You create a new site named Site1.
You need to prevent Web1 from accepting HTTP URLs that are longer than 1,024 bytes.
Which feature should you configure?
A. Connection Strings
B. Authorization Rules
C. Request Filtering
D. HTTP Response Headers
Answer: C
61. Your company has a network that has 100 servers. You install a new server that runs
Windows Server 2008 R2. The server has the Web Server (IIS) server role installed. After a
week, you discover that the Reliability Monitor has no data, and that the Systems Stability chart
has never been updated.
You need to configure the server to collect the Reliability Monitor data. What should you do?
A. Run the perfmon.exe /sys command on the server.
B. Configure the Task Scheduler service to start automatically.
C. Configure the Remote Registry service to start automatically.
D. Configure the Secondary Logon service to start automatically.

Answer: B
62. Your network contains a server named Server1 that runs Windows Server 2008 R2. Server1
has the Web
Server (IIS) role installed. You need to review the contents of the IIS-Configuration
Analytic event log on Server1. You configure Event Viewer to show the Analytic log. What
should you do next?
A. Modify the General properties of the log.
B. Create a custom view to the log.
C. Attach a task to the log.
D. Modify the Subscriptions list for the log.
Answer: A
63. You need to capture the HTTP traffic to and from a server every day between 09:00 and
10:00.
What should you do?
A. Create a scheduled task that runs the Netsh tool.
B. Create a scheduled task that runs the Nmcap tool.
C. From Network Monitor, configure the General options.
D. From Network Monitor, configure the Capture options.
Answer: B
64. Your network contains two Web servers named Server1 and Server2.
Server1 has a Web site named Site1. Site 1 is configured to use SSL.
You need to import the SSL certificate from Server1 to Server2.
The solution must ensure that the private key is also imported.
Which format should you use to export the certificate?
A. Base-64 encoded X.509 (.cer)
B. Cryptographic Message Syntax Standard PKCS #7 (.p7b)
C. DER encoded binary X.509 (.cer)
D. Personal Information Exchange PKCS #12 (.pfx)
65. You install the FTP Service role service on a server that runs Windows Server 2008 R2.
Users receive an error message when they attempt to upload files to the FTP site.
You need to allow authenticated users to upload files to the FTP site.
What should you do?
A. Run the ftp -a 192.168.1.200 command on the server that runs Windows Server 2008 R2.
B. Run the appcmd unlock config command on the server that runs Windows Server 2008 R2.
C. Configure Write permissions on the FTP site. Configure the NTFS permissions on the FTP
destination folder for the Authenticated Users group to Allow - Modify.
D. Configure Write permissions on the FTP site. Configure the NTFS permissions on the FTP
destination folder for the Authenticated Users group to Allow - Write attributes.
Answer: C

66. You install the Web Server (IIS) server role on a server that runs Windows Server 2008 R2.
Your company's default Web site has an IP address of 10.10.0.1.
You add a Web site named HelpDesk.
The HelpDesk Web site cannot be started.
You need to configure the HelpDesk Web site so that it can be started.
What should you do?
A. Run the iisreset /enable command on the server.
B. Configure the HelpDesk Web site to use a host header.
C. Run the appcmd add site /name: HelpDesk /id:2 /physicalPath: c:\HelpDesk
/binding:http/*:80:HelpDesk command on the server.
D. Run the set-location -literalpath "d:\HelpDesk_content" HelpDesk ID:2 location port:80
domain:HelpDesk command in the Microsoft Windows PowerShell tool on the server.
Answer: B

67.Your company named Contoso, Ltd. runs Windows Server 2008 R2. You manage a Web
server named web.
contoso.com.
The Web server hosts two Web sites named www.contoso.com and webmail.contoso.com.
Users connect to both the sites from the Internet by using HTTP. The new company security
policy has the
following requirements:
The webmail.contoso.com site must be available for Internet users only through Secure HTTP
(HTTPS).
Two folders named Order and History on www.contoso.com must be available only through
HTTPS.
All users must be able to connect to both sites without receiving any security warnings.
You need to add SSL certificates on web.contoso.com. You must meet the company security
policy
requirements.
What should you do first?
A. Generate a self-signed certificate for web.contoso.com.
B. Generate separate domain certificates for www.contoso.com and webmail.contoso.com.
C. Request one certificate from the public trusted certification authority for web.contoso.com.
D. Request separate certificates from the public trusted certification authority for
www.contoso.com and
webmail.contoso.com.
Answer: D
68. You manage a server that runs Windows Server 2008 R2.
The server has the Web Server (IIS) server role installed.
The Web developer at your company creates a new Web site that runs an ASP.NET 3.0 Web
application.
The ASP.NET Web application must run under a security context that is separate from any other
ASP.NET

application on the Web server.

You create a local user account and grant account rights and permissions to run the ASP.NET
Web
application.
You need to configure authentication for the new Web site to support the Web application.
What should you do?
A. Configure the Windows Authentication setting to Enabled.
B. Configure the Forms Authentication setting to Enabled by using all the default settings.
C. Configure the ASP.NET State Service to log on to the new local user account by using the
Services console.
D. Configure the ASP.NET Impersonation setting to Enabled. Edit the ASP.NET Impersonation
setting by specifying the new local user account.
Answer: D
69. You have a server named Server1 that runs Windows Server 2008 R2. The server has the Web
Server (IIS)
server role installed.
You have an SMTP gateway that connects to the Internet.
The internal firewall prevents all computers, except the SMTP gateway, from establishing
connections over
TCP port 25.
You configure the SMTP gateway to relay e-mail for Server1.
You need to configure a Web site on Server1 to send e-mail to Internet users.
What should you do?
A. On Server1, install the SMTP Server feature.
B. On Server1, configure the SMTP E-mail feature for the Web site.
C. On an internal DNS server, create an MX record for Server1.
D. On an internal DNS server, create an MX record for the SMTP gateway.
Answer: B
70. You have 10 servers that run Windows Server 2008 R2. The servers have the Web Server
(IIS) server role
installed.
The servers are members of a Web server farm. The servers host the same Web site.
You need to configure the servers to meet the following requirements:
Allow changes to the Web server configurations that are made on one server to be made on all
servers in
the farm.
Minimize administrative effort to perform the configuration changes.
What should you do?
A. On all servers, configure the Shared Configuration settings.
B. On one server, configure the Shared Configuration setting.
C. On one server, create a scheduled task that copies the Intepub folder to the other servers.
D. Create a DFS Namespace. On each server configure the Inetpub folder as the target of the
DFS Namespace.
Answer: A

71. Your company named Contoso, Ltd. runs Windows Server 2008 R2.
You manage a Web server named Server1.
Internet users access Server1 by using http://www.contoso.com and https://www.contoso.com.
The Server1 server uses an SSL certificate from a public certification authority (CA).
You install an additional Web server named Server2.
You configure a Network Load Balancing cluster to distribute the incoming HTTP and HTTPS
traffic between
both Web servers.
You need to configure an SSL certificate on Server2 to support HTTPS connections.
You must ensure that all users can connect to https://www.contoso.com without receiving
security warnings.
What should you do?
A. Open the Internet Information Services (IIS) Manager console on Server2. Create a selfsigned certificate.
B. Open the Internet Information Services (IIS) Manager console on Server1. Export the SSL
certificate to a . pfx file. Import the .pfx file to Server2.
C. Open the Certificates snap-in on Server1. Export the SSL certificate to a .cer file. Import
the .cer file to Server2.
D. Request a new SSL certificate from the public CA. Use Server2 as the Common Name in the
request.Install the new certificate on Server2.
Answer: B
72. You manage a member server that runs Windows Server 2008 R2.
The member server has the Web Server (IIS) server role installed.
The server hosts a Web site that is only accessible to the executives of your company.
The company policy states that the executives must access the confidential Web content by using
user certificates.
You need to ensure that the executives can only access the secure Web site by using their
installed certificates.
What should you do?
A. Configure the SSL settings to Require 128-bit SSL on the confidential Web site.
B. Configure the Client Certificates settings to Accept on the SSL settings for the confidential
Web site.
C. Configure the Client Certificates settings to require on the SSL settings for the confidential
Web site.
D. Configure a Certificate Trust list to include the executives' certification authority (CA)
certificate.
Answer: C
73. You implement a member server that runs Windows Server 2008 R2.
The member server has the Web Server (IIS) server role installed.
The member server also hosts intranet Web sites.
Your company policy has the following requirements:
Use encryption for all authentication traffic to the intranet Web site.

Authenticate users by using their Active Directory credentials.

Avoid the use of SSL on the Web server for performance reasons.
You need to configure all the Web sites on the server to meet the company policy.
Which three actions should you perform? (Each correct answer presents part of the solution.
Choose three.)
A. Configure the Basic Authentication setting on the server to Enabled.
B. Configure the Digest Authentication setting on the server to Enabled.
C. Configure the Windows Authentication setting on the server to Enabled.
D. Configure the Anonymous Authentication setting on the server to Disabled.
E. Configure the Active Directory Client Certificate Authentication setting on the server to
Enabled.
Answer: BCD
74. Your company hosts a Web site on a server that runs Windows Server 2008 R2.
The server has the Web Server (IIS) server role installed.
SSL is configured on the Web site for virtual directories that require encryption.
You are implementing a new Web application on the Web site.
The new application has its own logon page named userlogin.aspx.
You enable Forms Authentication in the Web site properties.
You need to configure the Web site to use userlogin.aspx to authenticate user accounts.
What should you do?
A. Configure the Forms Authentication Settings to Require SSL.
B. Configure the Name property of the Cookie Settings to the userlogin.aspx filename.
C. Configure the Login URL property for the Forms Authentication Settings to the
userlogin.aspx filename.
D. Configure the Default Document setting to add the userlogin.aspx filename in the Web site
properties.
Answer: C