Bernie's Notes on IIS 4.0 (Exam 70-87)
Bernie recently passed this exam, and is graciously sharing his notes and thoughts on this exam.
Planning
Q. You want to automate the search or a remote web site and limit the resulting webmap. What can you use?
A: Content Analyzer
Q. You create a Web site on your NT Server, it uses information from a remote SQL Server computer. How could you protect the SQL Server computer from attacks?
A: Implement IPX as the protocol between the IIS and SQL computers
Q. An IIS computer hosts two web sites, support and marketing on a single IP address. (204.39.14.7) Support uses a host header (support.wh.com) and marketing does not. A couple of users are trying to access the web site. Bill types in support.wh.com and Monica types the IP address. What web site will each connect to?
A: Bill will connect to support and Monica to marketing
Q. Four web sites hosted on an IIS computer have unique host header names and are configured to share a single IP address. How should these names be represented in the DNS database?
A: 4 separate records with each record mapping a different host header name (for each department) to the single IP address
Q. You generate a keypair, install a server certificate, enable SSL encryption and enable the option to require 128 bit encryption in order to enable secure communication over the Internet. What key does this option refer to?
A. Session Key
Q. IIS 4, All Web browsers support host headers, each department must have its own web site with a unique host name. File level security is required. Set it up as cheaply as possible.
A. Use a single NT Server that has NTFS partitions and use host header names to provide unique URL’s for each department.
Q. Some weasel is trying to bring down your web server through denial of service attacks, you discover that he is accessing your site from an ISP. What is the best way to protect your web site from the weasel?
A. Configure your web site to deny access to the network to which the attacking computer belongs.
Q. You configure an IIS computer to join the domain, in User Manager for Domains you create a domain user account that will be used for anonymous access to a Web site on IIS. What else must you do to make sure that all users can anonymously access the Web site?
A. On the IIS computer, assign the log on locally right to the anonymous domain user account. In the Web site’s properties on the IIS computer specify the user name and password for the domain anonymous account. Grant the new account proper NTFS rights for the Web Site’s files.
"The anonymous user: Whenever someone accesses your site anonymously (because you have configured anonymous access in IIS Admin), the user is in the context of a Windows NT account called IUSR_machinename. This is important because, by using this account, and limiting its access through Windows NT, you are still able to restrict permissions to specific files (assuming you are using NTFS). Any account used for Anonymous or Basic Authentication must have the Logon Locally privilege. This is configured in User Manager for Domains, under Policies, User Rights."
Q. You administer many web sites for a large company that goes through a lot of Temp employees. Your network uses the single master domain model, each computer belongs to a resource domain. The company maintains a web site for the Temp employees. This web site doesn’t allow access to the public. With the least amount of effort maintaining password security, make it so that only current Temp employees can access the Web Site.
A. Configure the Web Site to use NTCR, create a global group called Temp, assign all temporary employees to this global group. Grant proper NTFS rights for the Web Site to the Temp group.
Q. You need restrict certain areas of an Internet Web site to certain employees of a multioffice company and your confidential web pages must be sent in encrypted form only. How do you do that?
A. Use Certificate Server to issue a client certificate to each user, map each certificate to the appropriate user account, grant the user access permissions for the Web site, configure the restricted Web pages to use SSL encryption. Why? SSL is required because "the only secure way to ensure safe transmission of data is through Secure Sockets Layer (SSL)." And "To use SSL on IIS you need to perform the following steps: Request and install a server certificate. Enable the appropriate settings in the Secure Communications dialog box. The Secure Communications dialog box will not appear unless you have a server certificate installed."
Q. You have an NNTP site for employees. How can they search the newsgroups for information?
A. By using index server. "When used in conjunction with Microsoft Internet News Server, Index Server 1.1 also allows users to search Internet newsgroup (NNTP) articles."
Q: You have an IIS with SMTP server and two branch offices with IIS backboned together over the Internet. What should you implement in order to ensure secure communications?
A: SSL between sites "the only secure way to ensure safe transmission of data is through Secure Sockets Layer (SSL)."
Q: What are the minimal requirements for Index server?
Before installing Index Server, you must have successfully installed:
Microsoft® Internet Information Server (IIS) version 2.0 on Microsoft® Windows NT® Server version 4.0
—Or—
Microsoft Peer Web Services (PWS) on Microsoft Windows NT Workstation version 4.0
On Microsoft Windows NT Server, the minimum hardware required for Index Server is same as that for IIS. On Microsoft Windows NT Workstation, you need 16 megabytes of RAM minimum.
Index Server program files require anywhere from 3 to 12 megabytes of disk space, depending upon the number of languages installed. Index Server can index documents in several different languages.
Disk space needed for storing Index Server data depends upon the size of the corpus and type of documents. The free disk space must be roughly 40 percent of the size of the corpus.
For security reasons, it is recommended that Index Server data be stored on a Windows NT File System (NTFS) drive. For more information on security, see the Security page in the Microsoft Index Server Guide.
The minimum configuration requirements for Index Server are basically same as for Microsoft Windows NT Server but the configuration for optimum performance depends upon the number of documents, size of the data corpus, and the rate of queries. A 486/DX4-100 computer with 32 megabytes of memory running Windows NT Server 4.0 serviced queries well if the number of simultaneous queries is not too high. For a small organization, this may be sufficient; but for a larger group serving more users, better hardware is recommended.
The size of the corpus affects the disk space needed for storing Index Server data. The disk space needed for Index Server data in all the cases is approximately 40% of the size of the corpus. While the average usage is less than 30% of the corpus, the peak usage of disk space can be 40%.
A faster CPU and more memory improves the performance of indexing as well as speed of queries. If the number of documents is very large, not having enough memory will seriously affect performance. If you see that performance is slow when Index Server is running, add more memory to improve the situation.
Installation and Configuration
Adding a New Site
Using the New Site Wizard, you can easily create new Web and FTP sites. To set up a new Web site on Internet Information Server 4.0, follow these instructions:
1. From Start/Programs/Windows NT 4.0 Option Pack/Internet Information Server, select Internet Service Manager. This brings up the Microsoft Management Console with the Internet Information Server snap-in loaded.
2. Expand the Internet Information Server snap-in.
3. Select the computer or a site and click the Action button.
4. Click New and then Site to launch a wizard that adds a new site.
5. Follow the on-screen directions to assign identification information to your new site.
Q: Requirements for SMTP
A: a) NTFS
b) FAT
c) TCP/IP
d) NetBIOS
e) DNS
Q: Your Domain name is currently set to one of your subsidiaries, How do you get SMTP mail to appear it is coming from your real companies domain?
A: a) Masquerade domain
b) Smart host header
c) Domain name change
"In this variation, the Internet Mail Connector delivers all internal mail and a smart host delivers all mail external to the company. There may also be other SMTP systems on the corporate network. This allows you to represent all the users in the company externally as if they are from one domain (for example, user@company.com)."
Configuring and Managing Resource Access
Q: Where are the Mime settings stored?
A: In the Metabase not the registry! "The general settings, or properties, for a site are displayed in these property sheets and stored in the metabase."
Q: To enable remote administration of an ftp site what do you need:
A: IISADMIN folder on the computer
WWW service must be running
Q: You have an IIS installation which has only FTP, how can you configure the FTP site remotely?
If you create a new Web site in Microsoft Management Console, Web site Operators cannot remotely connect to that site with Internet Service Manager (HTML) until you create a virtual directory called IISADMIN. (Note that users designated as Administrators are able to remotely administer the site through the Administrative Web Site without this virtual directory). If you create the Web site by using Internet Service Manager (HTML), then your Web server will automatically create the IISADMIN site because the server assumes that you will want to remotely administer that site.
HTML-based Administration (HTMLA), the HTML-based ISM, uses a Web page to lead you through the creation of the virtual directory. You can use this administration tool to establish and modify virtual directories remotely.
Integration and Interoperability (Connectivity)
Q. ON IIS you set up a company web app which retrieves info from a SQL database, SQL is on a remote computer and is set up to use integrated security. What do you do to enable company employees to access the SQL info through the web app?
A: Configure IIS to use Basic Authentication
Q. How should you specify a path in an .htm file to an .idq file several directories below the wwwroot?
A. /directory1/directory2/whatever.idq (not c:\ nor \directory1\directory2\whatever.idq)
Q. What is required to run PERL scripts?
A: An interpreter
Q. You are using IIS on NT 4 and you want to connect to an Access 2 database on an NT 3.51 server, but you cannot. Why?
A. IIS Database Connector requires 32 bit ODBC, Access 2 uses 16 bit ODBC.
Running Applications
Q: You need to include your logo on every web page on your
site. How can you do this with the least effort? A: Use SSI (server side includes) to include the image on all web pages. Q. What are the effects of configuring a web application to run in separate memory
space? A: If the application crashes the server can continue to run. The Process: Inetinfo
Theread count value is lower in perfmon Q. Implement ISAPI filters for your web sites. FilterA must have top priority and be
applied to all existing and future Web Sites FilterB must be applied to one Web site only.
How would you do this? A: Apply filterb through the web site properties/ISAPI Filters/Add first and then apply
filterA through the properties for the IIS computer /wwwservice master
properties/edit/ISAPI Filters/add Monitoring and Optimization
Q: Your IIS ‘pute is doggin it, you look at perfmon and notice that under
the IIS Global object, that the cache misses is consistently high. What can you do? A: Add more RAM Q: When e-mail is not delivered users don’t receive a NDR til several days late.
What can you do to ensure that NDR’s are delivered sooner? A: Decrease the retry interval value Q: What do you need to do to log all accesses on an NNTP site? A: Specify the active log format, enable logging on the properties sheet, enable the
log access on the home directory and in each of the virtual directories properties tabs Q: You need a daily log of your web site. How can you configure it to produce a daily
report to minimize performance degradation? A: Configure the web site to log to a file, and to start a new log daily. Troubleshooting
Q:You had 50 MB of data that index server was tracking. You add 100 more and users
complain it is too slow. What do you do? A: force Master merge For a master merge, the source indexes are all of the existing shadow indexes and the
current master index (if any). At the end of a master merge, all the source indexes are
replaced by a single target master index. Although the master merge itself is a very
resource-intensive (both for CPU and disk space) operation, after the completion of a
master merge, resources are freed up. A lot of the redundant data is deleted and queries
run faster. Q:You have 3 web sites running on one IIS server. When a user uses index server to do a
query, he gets data back from all of the web sites. What do you do? A: Use scope in the .idq file or separate catalogs for the sites. Create a catalog for each site? (probably right) One person said create a index for
each site There are two reasons to create more than one catalog: to distribute queries, and to
support virtual servers. Because it is impossible to create a query that spans more than
one catalog, careful consideration of the consequences must be made before creating
multiple catalogs. The ability to query "everything" is lost. Use of default
catalog support is also impaired: no support for multiple IP address-specific default
catalogs is provided. Q: Want to do a search of unfiltered documents: A : Files that are corrupted or files that could not be filtered because of problems in
a filter DLL are called unfiltered files and can be viewed by issuing the administrative
command for unfiltered files. This command issues the query: @Unfiltered=true Q: You have a 500MB corpus, how much free disk space does Index server require to
index? A: 200MB (40%) The disk space needed for Index Server data in all the cases is
approximately 40% of the size of the corpus. While the average usage is less than 30% of
the corpus, the peak usage of disk space can be 40%. Q: You change the port number of your FTP site and try to connect to it and can't why? A: You are trying to connect with the default port number Q: You set up an FTP site and set up a virtual directory and set the listing to UNIX.
Afterwards, not all users can access it. Q: FTP server is setup with directory annotation, UNIX cmd, and some other stuff. Some
users can access while some users can't, how do you fix it. A: FTP service supports annotating a directory with custom messages. The annotation
text should be stored in a special file named ~ftpsvc~.ckm under the directory. If this
file exists in the target directory of a Change Directory (CWD) FTP operation, then the service responds with the contents of
this file for the operation. This provides a way for administrators to add custom messages
for directories under consideration. By default the service is configured to not send
annotation text. If administrator decides to add a custom message, the annotation file
should be created as well as this flag turned on. It is recommended to make the annotation
file a hidden file so that the file does not show up on a directory listing. Other unsorted issues MMC simulation questions: 1.Create a virtual site for your company 2.Create 2 virtual FTP directories for c:\docs with read/write perms. and c:\forms with
read only perms. 3.Deny Web access to all ips except 192.168.0.96 - 192.168.2.127 (ans: Know what mask
will create a 32-host subnet, and what starting address to use to restrict (or permit) a
range of addresses. Network ID 128.68.0.0 and use a subnet of 255.255.255.224) 4.Create a website named WWWROOT for the c:\wwwroot dir. with the IP 172.31.255.201 and
one for WEBPUB for the d:\inetpub\webpub dir. with the IP 192.168.1.253. 5.Create a virtual directy for a content provider of your company. (Page 83 of
Microsoft Press) 6.I had a troubleshooting question in which a virtual directory was setup to store
webpage images. Users could see images stored in the home directory, but not in the
virtual directory. One of the images not viewable was of the gif type Answer: possibly MIME mapping necessary for .gif/image gif???? 7.Only allow the CFO to access a particular virtual directory and deny all others
access. 8.One simulation question that I thought was very sneaky - but apparently I got it
right? I believe it was a virtual directory, and the objective was to change the
permissions to disable "anonymous" access. However, the setup for the question
stated that the physical directory for this particular virtual directory was something
like c:\docs\marketing.However, when I got to the properties sheet for the virtual
directory in ISM, I found that not only did the permissions need to be changed (the stated
objective), but that the "home directory" value was incorrect - it read
something like C:\marketing. 9.I got one that asked me to create a virtual directory for a directory on another
server \\win951\temp\documents?. When you create a directory using UNC you need to enter a
username and password. They didn't give me one to use, so I browsed and used the IUSER_NT5
account and left the defaults. 10.By using the MMC they want you to decrease the number of inactive connections
without decreasing the number of users (ie connection) or without decreasing the timeout
value? Answer: Disallow http keep alive. 11.Create two FTP sites. One called Docs and the other called Forms. The Docs site
should be homed on C:\docs and allow uploads and downloads. The Forms site should be homed
on C:\Forms and only allow downloads. 12.Change the number of concurent FTP connections 13.Change the directory listing mode from DOS to Unix for a default FTP site. 14.be able to assign a different port to a FTP site you create. They give you the name
of the site and the directory to attach it to. 15.(this might be a trick, the ftp site does not specify a directory for the logs, but
the www service does.) 16.that's all i remember for these, but there were more. 17.Create 2 virtual FTP directories for c:\docs with read/write perms. and c:\forms
with read only perms. 18.Create a FTP virtual folder on the default FTP site. Only allow 10 concurrent
connections to the site. 19.Enable logging on the deafult web and FTP sites, and configure it to start new logs
when the file size reaches 4MB 20.Disable access to the "Something" FTP site for a specific user. His IP
address is 221.34.57.1 make logging for www and ftp create new log files after 4 MB. (this
might be a trick, the ftp site .does not specify a directory for the logs, but the www
service does.) 22.Track Anonymous logins on the Default FTP site, and do NOT track anonymous logins on
the Default Web Site. (This one stumped me). 23.In the simulation be able to deny an single IP address access to a web site while
allowing everyone else access to connect. 24.In the simulation, be able to assign a virtual FTP directory to another machine.
They gave it as \\win95\public\information\. The main web site was already set up for you.
25.At least three that had to do with synchronizing a password for the anonymous user
account in MMC. In each case the questions just said synchronize the new password but they
don't specify if you should assign the IUSR_NT5 user as the anonymous account nam 26.One MMC sim that really got me was how to monitor anonymous logons to the FTP site
using ISM. I was not sure if I had to activate the anonymous user account (IUSR_NT5) and
Enable anonymous access....or if I just had to check the logging checkbox on the FT. 27.How will the password and user name be transferred between the client and the server
- Both will be encrypted - The user name will be encrypted, the password will not - The password will be encrypted, the user name will not - Neither will be encrypted * * This was the answer to mine since the site was set up
to allow anonymous access to everyone. 28.One was simply changing directory security so that anon acess was not allowed. Be able to assess what is encrypted - password/username - by looking at the security
settings of a web server. 29.The anonymous ID for this particular site is IUSR_NT5, set things up so that the
password will be synchronized with the IUSR_NT5 account in NT. 30.Disable HTTP Keep Alives on the Default Web Service. 31.Another simulation requiring synchronizing the passwords for the Tech Support Web
Site. 32.One question involved adding an ISAPI filter. 33.One question involved setting up an HTTP header. Virtual Sites/Directories You have two domains. Domain A and B. You are the administrator of domain a and Wins
and DNS are enabled on your domain. You want to be able to access computers on domain B by
using the computer name. What do you do? (Choose three) My answer was to set up a trust, add to the local admins group and something else? -You configure multiple sites on a IIS 4.0 server. Both sites share the same IP
address, Virtual Directory and TCP port. DNS entires have been setup that point each FQDN
to the same IP address. However, when users try to go to the 2nd web site they open up t Answers resemble: A) Configure HOSTS files on the server B) Configure HOSTS files on the clients C) Configure the clients to use DNS D) Configure Site 2 to use a Host Header My Answer: D, but I was confused by the fact that they could be using the same default
document as they share the same home directory. But as this was not mentioned in the
questioned I assumed it was not important. Host headers for IP addresses, still doesn't work. Why? Make entries in Host file. How to index a virtual directory in the marketing domain when the server is located in
the sales domain HTMLA question and how to configure settings for MIME - 1 question on HTMLH. How to add this so users can access (MIME...) You want to connect to a virtual directory using friendly computer names: Choose 2, I
said use WINS server for name resolution & Configure DNS for name resolution. Other options included using
multiple DHCP servers and some other DHCP options DNS is not enabled and you want to connect to a virtual directory "home" on
Server1 with IP address w.x.y.z what do you use at the URL address: http://w.x.y.z, http://server1/home, ftp://???,
http://www.server1.com/home FTP Q: You change the port number of your FTP site and try to connect to it and can't why? A: You are trying to connect with the default port number Q: FTP server is setup with directory annotation, UNIX cmd, and some other stuff. Some
users can access while some users can't, how do you fix it. A: ??? Directory Annotation but I had no clue :) Q: To enable remote administration of an ftp site do you need: IISADMIN folder on the computer WWW service must be running Q: You have an IIS installation which has only FTP, how can you configure the FTP site
remotely? a) enable WWW b) allow anonymous to FTP c) set up Winnt Challenge login Q: You set up an FTP site and set up a virtual directory and set the listing to UNIX.
Afterwards, not all users can access it. a) assign NTFS rights b) Set listing styles to MS-DOS Index Server Q:You had 50 MB of data that index server was tracking. You add 100 more and users
complain it is too slow. What do you do? A: force Master merge (prob right) one person: redo the master index Q:You have 3 web sites running on one IIS server. When a user uses index server to do a
query, he gets data back from all of the web sites. What do you do? A: Use scope in the .idq file or separate catalogs for the sites. You have 3 web sites running on one IIS server. When a user uses index server to do a
query, he gets data back from all of the web sites. What should you do? Create a catalog for each site? (probably right) One person said create a index for
each site Q: Want to do a search of unfiltered documents: A :Use CiForceuseCi = True in the .idq file. Q: You have a 500MB corpus, how much free disk space does Index server require to
index? A: 200MB (40%) Q: You install IIS on a Win95 machine and want to use Index server, what do you need to
do? A: Upgrade to NT Server Q: What are the minimal requirements for Index server? A: ??? Q: Index server is installed on box with 64MB ram and 64MB swap. Index server is moving
slow so you increase the Index Server cache setting and it moves even slower why? a) Master merge forced b) Shadow merge forced c) More Index server cache is residing on the Swap file -> correct one Q: You have 64MB or RAM and 64MB of virtual memory. You want to improve Index server
performance, so you increase the cache, but performance decreases, why? A: The cache is now using virtual memory Q: You have a server set up with three different web sites. When users issue a query,
they recieve non-relevant info or unreachable links, fix? a) Create indexes for the three different servers b) limit rights??? 12.How can you index other domains remotely ? using HTML manager 3. You have one IP address and two virtual servers how do you do it? Custom HTTP header* 4. You have two virtual servers how do you do it? a. Custom HTTP header* b. Two IP addresses* Q: You need to change the port of 200 web sites, what it the quickest way to do this? A: Use the WSH Q: You need to configure three intranet Web sites. How to segregate? a) Host Headers b) Three separate IPs, modify DNS Q: You are behind a firewall and want to administer an IIS server with HTMLA, what port
does the firewall have to let through. HTMLA uses HTTP on a prot chosen randomly at installation. RPC listener port* HTPPS? SSL* You need to use HTML manager to manage a website, which firewall port must be enabled? You want to administer an IIS server using Internet Service Manager, but it resides on
the other side of a firewall. What port must be open to allow you to manage this server? The two plausible answers were: 1. NBT 2. RPC listener I chose the RPC port, as that's
really the type of client/server communication is being accomplished. However, I realize that virtually ALL M$
networking is accomplished with NetBIOS over TCP/IP (ports 137-139) so I'm not sure what's correct here. (time to break out the
Sniffer!) You access a web page and you want to use Site server to download the web page and all
it's links. Do you set up site server to download by specifying url name or the physical directory??? Q: 3 Sites require Host Headers Summaries, Use Index server or Site Server? A: ??? Q: You want to have web pages with the extension HTMH, how do you add this so users can
access. A: ??? Q: You have 2 servers (NY and Ontario), what's the easiest way to to change the IP
ports on the 200 sites contained at those locations? a) Use Inet Server Manager to change individual ports b) Inet Server Manager HTML to change individual ports c) write a VB script and run it on both sites d) write a VB script and run it on one site - One question on WHS. (changing 200 puters IP ports or so...) Q: Host headers for IP address should be placed ? a)the HOSTS file on the NT servers b)LMHOSTS file on the NT servers and clients c)placed in the WINS (where the dns entry would go) Q: What's contained in the METABASE (multi answer) Ans: Just IIS stuff, not site server or index server. a) IIS Help file location b) Virtual dir. Security(*) c) website home dir. Permissions(*)? d) MMC Snap in info e) site server toolbar settings f) Index Server settings g) Site Server Express settings You have a document called *.stm which is being read as an htm document do u change the
mime mapping of: 1.. text/stm mime or 2.. text/htm mime? Q: You've configured a virtual directory called on your server called "White
horse". After doing so, some people cannot access it. a) Assign NTFS rights to the directory b) Change name to Whitehorse -> correct one Q: Raul needs to change the IIS default web site on the road from his 95 laptop, how? a) MMC b) MMC (HTML) Q: You set up three intranet web sites and set them to use headers. How do users find
them. a) Install modified Hosts file to the Server b) Install modified Hosts file to all the clients c) Install modified LMHosts file to all the clients d) Modify the WINS server NNTP Q: In NNTP you want to show address as a different domain name? A: Use Masquerade name ??? 9.Can you use queries to search for content on NNTP, or do you have to connect to
Microsoft NNTP Service and request a list of available newsgroups ? >I think u can run direct queries on NNTP but not positive so double check Q: You setup an expiration policy on NNTP to expire articles older then 7 days and a
size of 500MB. When do articles expire? A???: When any articles in a group are older then 7 days they expire and when the size
of the file exceeds 500MB the oldest articles expire (not sure about this, may be the total size of all groups combined).
Understand what the policies can apply to (my question explicitly stated that the expire policy applied to the entire server - not a
particular newsgroup) and that both criteria apply: If the file exceeds the particular size, the oldest messages are deleted
(regardless of age). As they exceed the maximum age, the are deleted regardless of file size. -You administer a NNTP server. How can you enable searching capabilities Answers resemble: A) Install and configure Index Server B) Something C) Instruct users to use the search features of their client newsreader D) Nothing, newsgroups cannot be searched My Answer: C What does NNTP require: 5 options choose 3, NTFS, FAT, TCP/IP etc -You currently store NNTP files in a single virtual directory on a single RAID 5 disk
array. How can you improve performance Answers resemble: a) Break NNTP up into many virtual folders b) Break NNTP up into many servers/many arrays A) Create additional virtual folders on the single disk array B) Create additional virtual folders on multiple disk arrays C) Move the virtual folder location onto a non RAID 5 disk D) something, something, something. My Answer: I choose A because there is only one RAID 5 array. One person said move off
raid 5 disk. 11.What is the advantage (or disadvantage) when your home directory is located on a
RAID5 disk, multiple virtual directories are created on a single RAID5 disk, or that virtual directories are located among
multiple RAID5 disks ? ? ? >when multiple virutal directories r distributed among RAID5 this will yield faster
reading access to the directories ODBC References: http://support.microsoft.com/support/kb/articles/q183/0/60.asp http://support.microsoft.com/support/odbc/faq/faq3663.asp IIS Resource Kit on pp. 259-260 For further info check the tech net under "Troubleshooting guide for
80004005" There are always a number (tipically three) of OLE DB/ODBC <<MS OLE ERROR
48>> <<0005 OBDC driver>> error 80004005 questions. The questions are similar except the last few words that describe
the error: " Login Failed" when user attempted to access the Web site. This can happen when the SQL Server denies access. "Data source name not found and no default driver specified". The message"can not find the name space.." indicates that the data source
specified points to a wrong directory/file or possibly??? Wrong or no ODBC DSN configuration. "General Network Error" Due to heavy use the database has been recently moved to another server......? or possibly I don't know, but possibly changing SQL Server form 16 bit named pipes to 32 bit TCP
connection Each question has the same answers: A. the user has insufficient permissions to access the database. B. the user has insufficient permissions to access RESOURCES in the database. C. recent revisions of the database changed the connection method from named pipes to
TCP/IP. D. the database was recently moved to another server.... E. OBDC drivers not config'd F. Incorrectly configured Data Source Name (DSN) .... Scripting Q: Configuring a web site for CGI and ISAPI with execute rights in the \scripts
directory (where the cgi and isapi files are placed). But cannot read the Isapi files why? Quite a few questions on permissions assigned to ISAPI and CGI scripts directory. Know
that execute permission must be assigned to the scripts directory. Also they wanted to know why the ISAPI scripts are
not working when the CGI scripts are working after You have a ISAPI app that is slowly taking too many resources, how can you decrease the
number of threads. add more RAM run each app in a separate memory* install an ISAPI filter to validate users Q: You've grouped together all CGI scripts and ISAPI apps into the scripts folder and
assign execute rights to the folder. Afterwards, the ISAPI works and the CGI doesn't. a)assign read rights for the folder as well ??? Q: You have a PERL script setup on one server, you move it to another server but it does not work, what else is required? a) Perl interpreter installed on the other server. -> correct one. b) run FILE to convert it into a Batch file c) Recompile script Q: You set up a script on the server. It works for some users but not others, the
directory is set up for read access. a) set up for execute as well b) Set NTFS read rights for users c) Set up NTFS execute rights for users A: ??? The choices were something to do with read on ntfs for directory, or execute
rights on ntfs, or read access on directory, or stop and restart the service??? Change the ports setting on 2000 computers divided between 2 remote locations - run the
scripts on one server, run the scripts on both servers? A similar question where Mary has just been made a member of Managers group and her
scripts are not working but Bob's are and Mary & Bob have the exact same group settings and permissions for the relevant
directories. You have an ISAPI app that managers use (worthless.dll). a manager and was added to the managers group but it
still does not work, why? Stop/start the WWW service* Know how to log to file and it is faster than log to SQL server. Security Q: John set up 3 Anonymous logins to IIS with different passwords and suddenly nobody
can access the sites. They are using NT authenticated logins. A: The answer is that john did not change the passwords in NT to match Q:You have an intranet and the finance area has documents located there that only they
should be able to see. John is new to the company. You add him to the finance users group yet he still cannot log in. What do
you do? A???: Give John NT permissions also Q: If you secure the access to a web page using SSL how must you change the URL in
order to access the secured page? - https:// -> correct one. - httpssl:// - http:// One IIS server & 2 remote locations and want secure communications between them at
all times. Do you setup SSL only on the server or configure client certifcates on one or both clients or do you use domain
accounts and permissions. There are 2 domains Sales and Marketing (no trust specified). IIS is running on Sales1
in Sales and wants to index something on the Marketing1 server in Marketing. Do u: 1.. make marketing1 part of sales domain 2.. Create an account on marketing1 that can be accessed from Sales 3.. Can't remember other options, but what would you do? 4. IIS on server1 of domain SALES and want to have a virtual directory on server2 of
domain MARKETING. My ans : move server2 to the part of domain SALES Q:There are 2 domains Sales and Marketing (no trust specified). IIS is running on
Sales1 in Sales and wants to index something on the Marketing1 server in Marketing. 1) make marketing1 part of sales domain 2) Create an account on marketing1 that can be accessed from Sales 3) Can't remember other options, but what would you do? Q: You want to exclude a range of IP addresses, choose the correct network address and
subnet mask. Q: You enable SSL on a virtual directory. A user is complaining that they can not see
any files, but you can. What do you do? A: Install an SSL capable browser on the client. Q: You have a separate directory for each client and they are only allowed to access
their own directory. What it the best security method? A:Client certificates. Q: You must setup a private web site, what can you use to authenticate to it a)Certification Server b)Transaction Server c)Site Server d)Message Que Server Q: You have a web site you want to secure so that just managers can see it. Which
service should you use? a) Certification Server -> correct one b) Transaction Server c) Site Server d) Message Queue Server Q: Becky logs onto a sensitive web site and it is set up to use Basic Authentication. What is Encrypted? a) Password and Data are encrypted b) Password is encrypted, Data isn't c) Data is encrypted, Password isn't d) nothing is encrypted * You want to get the most performance out of your IIS server. What is the best way to
secure sensitive directories? a) enable SSL only when required* b) Enable SSL all the time c) use the client certificate d) move SSL directories to a separate PC Q: Which options would require multiple certificates? a) Server hosting web sites for multiple companies b) Server has links to servers in differnt domains When do you need multiple digital certificates: when your IIS hosts virtual servers for
multiple companies or when your virtual server is spread among many virtual directories across various locations. Q: How to configure IIS to require Multiple security certificates? A: ??? Q: You are on Server2 and set up a virtual directory to \\Server1\stuff. An error
message 'Directory inaccessable, unable to login' comes up after setting up. a) User has insuffcient rights b) Server is in a different domain -Something like.....You setup a web site on your intranet. Clients use different
browsers. When some clients try to access pages they receive an error message like "Error 402 (I can't remember the number),
Browser does not support required encryption meth Answers resemble: A) SSL certificate on server is invalid B) Site is using NT Challenge/Response authenication method C) Browser does not support SSL D) Something else.... My Answer: I picked B because only I.E. supports NT authenication. 13.The SQL Logon failed. Can this be due to a user not having the appropriate SQL
permissions or NTFS permissions ? >certainly proper permissions r a must (must have both NTFS and SQL permissions, and
remember that the most resrtrictive applies) Know that another type of authentication is to use client certificates mapped to a NT
account Site Server/logging Downloading files to a laptop, creating a 'map' of files from an IIS server with
multiple remote virtual directories. Just understand it's capabilities and services. Q: What's the easiest way to find how many 32K objects that have HTML extensions. a) Site server b) import a log file to an excel spread sheet c) use the NT Explorer to search the web site dir. d) use ftp Change DNS domain to .com from .edu on all of your sites. How? WHS Q:You are logging WWW with text logging and you want to know where to find the number
of page hits? 1) in the log file -> correct one. 2) Event Viewer Q:You access a web page and you want to use Site server to download the web page and
all it's links. Do you set up site server to download by specifying url name or the physical directory??? A: url Name Q: You want to save your entire website and all links off it to your laptop, what do
you use? A: Site Server Express Q: Site Server Reports Hourly on Web site, some ips are not logged a) because it's setup to discard open visits on the turnaround b) setup to commit open visits c) Can't resolve client IPs to Hosts d) Clients have invalid IP??? 15.What is the function of Site Server Express Content Analyser? >The site server is an analysis tool to help u better momnitor/troubleshoot ur
server. The content analyzer points to faulty links in the server tree, which is visaully displayed -You want to enable logging of your web site. What option should you choose to allow
the lowest processing overhead. A) Normal Text Log B) Compressed Normal Text Log C) Logging to a SQL database D) Logging to a remote SQL database Answer: A How do you increase performance of Site Server Express logging? Answer: I answered something to do with increasing the cache setting??? SMTP Q: What's the "Local Retry Queue Length" ? A: ??? Q: What are SMTP Smart host headers ? A: ??? Q: How to improve SMTP performance? decrease message sizes allowed, decrease the update/retry interval, move badmail folder
to another directory Q: You have a SMTP server in another domain which does not use DNS and you want to set
up that mail being directed through it contains the Company's main domain name. A: ??? Use SMTP smart host header. Q: SMTP should be configured to securely transfer mail betweens sites, how? a)SSL b)PPTP Q: Your Domain name is currently set to one of you subsidiaries, How do you get SMTP
mail to appear it is coming from your real companies domain? a) Masquerade domain b) Smart host header c) Domain name change?? Q: You have an IIS with SMTP server and two branch offices with IIS backboned together
over the internet. What should you implement in order to ensure secure communications. a) SSL between sites b) no changes, etc. Q: Requirements for SMTP a) NTFS * b) FAT ? c) TCP/IP * d) Netbios e) DNS ? 2. We are expriencing 6 local query retry daily. How to increase the performance. My ans are decrease the local query retry interval and increase the incoming mail
timeout. Another possible answer is to increase the timeout setting??? Want to do a search of unfiltered documents: @unfiltered = True Word lists are taking up too much memory, what do you do select 2 options: A. Decrease size of word lists ?*? B. Decrease number of word lists ?? C. Increase the number of word lists * D. Increase the size of word lists