Vic Vega

Here is my dump. I have also attached it in an text file in case you have trouble rendering this e-mail as an html page.

VicVega here. I have not yet written the IIS4 exam, but have compiled this selection of questions found on the internet. I believe many of the answers previously posted are incorrect, even answers

people seem to collectively agree on. I not only provide answers to questions, but provide why the

As I have not written the IIS4 exam yet, thus I do not believe I am violating my non-disclosure pact

My resources: New Riders Training Guide which is OK, but not as good as other New Rider Books ,

Sam's IIS4 in 14 days, which is probably the best training guide for IIS4 out right now, though it isn't

perfect, and SYBEX TESTSUCCESS (NOT to be confused with the training guide), which is excellent.

It is definitely the definitive textbook for PREPARING to WRITE the exam. I noticed many questions

in the dumps were in the Sybex Test book. Looks like they did their homework.

I did not use Transcenders. I never have, yet I have scored over 900 on all NT exams, with a

This dump is MY property, and can be redistributed for free by anyone, but if anything bad ever

happens to Robert who runs this site, not only will they have to deal with me, but I'm taking this dump

You set up three intranet web sites and set them to use headers. How do Lusers find them.
[] Install modified Hosts file to the Server
[] Install modified Hosts file to all the clients
[] Install modified LMHosts file to all the clients
[] Modify the WINS server

VicVega: B is correct. Host files hold IP address to FQDNs, and each client has its own HOSTS file,

thus placing the file on the server will accomplish nothing. Furthermore, the Sever does not need the

HOSTS file, as it will recognize any request for its own IP's as loopbacks.
WINS sever and LMHOSTs files ares used for Netbios name resolution, not FQDN's. For centralized

name resolution, a DNS could be used, but since this is not an option, you go with hosts files.

Discover that the average reading of local retry queue length is 6. How can you improve this?
[] Increase NTFS cache size
[] Increase incoming mail connection timeout
[] Decrease decrease local retry intervals
[] Decrease remote queue max hop count

VicVega: C is correct. I have never heard of an NTFS cache. The following three items are all

configurable SMTP options. Decreasing remote queue interval is does not effect the local queue.

Remote max hop count is the max number of routers a message can pass through before being

considered undeliverable. Decreasing the local retry will force IIS to deliver a message more often.

After a certain number of retrys, the mail will be considered undeliverable, and removed from the

Install NNTP. You want to provide search capability for newsgroups. What should you do?
[] Implement Index Server. Use .idq files*
[] Implement ODBC to SQL Server. Use SQL
[] Instruct Lusers to use search capabilities of newsgroup reader
[] Nothing. Not possible

VicVega: You use Index Sever to index newsgroups. Check out the properties of the NNTP default

site, home directory tab. Notice the tab "Index News Content." Click on the help button for more

You are on Server2 and set up a virtual directory to \\Server1\stuff. An error message 'Directory

inaccessable, unable to login' comes up after setting up.
[] LUser has insuffcient rights
[] Server is in a different domain
[] Must use Fully Qualified Domain Name (FQDN)
[] WINS resolution not enabled on the network

VicVega: Answer is A. "Login" in the error message is thetipoff that it's a rights issue. If the

server was in a different domain, a properly managed network should be able to access it and if you still

couldn't access it, you would receive a timeout error. Same goes with (d). C is wrong because you do

You set up a script on the server. It works for some Lusers but not others, the directory is set up for

read access.
[] Set up for execute as well
[] Set NTFS read rights for Lusers
[] Set up NTFS execute rights for Lusers
[] Set NTFS write access for Lusers.

VicVega: b is correct. Most restricive rights between NTFS and IIS4 prevail, thus if a Lusers does

not have read rights, they will not be able to run the script. A and C and D are red herrings, as

execute or read access are not needed to run scrips. Execute is only needed for ISAPI and CGI

You have an IIS installation which has only FTP, how can you configure the FTP site remotely?
[] Enable WWW
[] Allow anonymous to FTP
[] Set up Winnt Challenge login
[] Stop and start WWW service.

http://localhost:5619/iisadmin/iis.asp. Get it, HTTP. The other answers simply won't achieve the

required results, and don't fall for the Stop and Start tomfoolery. It's a great way to get your

You had 50 MB of data that index server was tracking. You add 100 more and Lusers complain it is too

slow. What do you do?
[] Track Content Index/Wordlists in Performance Monitor
[] Force Master merge
[] Track Content Index/Persistent Indexes in Performance Monitor
[] Increase the value of Control\ContentIndex\MaxWordLists in the registry

VicVega: The answer is b. "The master index is smaller than other indexes, making searches faster

and saves on disk space and RAM." Sams,337. Both counters exist, and could be used, but you should already know what the problem is. Increasing MWL would increase the size of word lists available in RAM, but would only improve searches in the unlikely event of the data being searched for actually being in a word list, not the Master Index.

You have 3 web sites running on one IIS server. When a Luser uses index server to do a query, he gets

data back from all of the web sites. What do you do? Choose two.
[] Incorporate the CiScope variable in the .idq query file.
[] Query the database using an .idq query and an SQL database.
[] Create a new MIME type for each web site and query the MIME type.
[] Create a separate catalog for each sites.

VicVega: A and D are correct. The CiScope variable in an .idq file specifies what directory the query

should begin with. A separate catalog for each site would isolate the content of each site within a

separate catalog for each, and you could specify which catalog to querey. The other answers are

You have two domains. Domain A and B. You are the administrator of domain A and Wins and DNS are enabled on you domain. You want to be able to access computers on domain B by using the computer name. What do you do? (Choose three)
[] Set up B to trust A
[] Set up A to trust B
[] Add the Domain A Administrators Global Group into a new local group on B.
[] Create a new Local group on B, and add it to the Domain A Administrators Global Group.
[] Assign rights to the global group.
[] Assign rights to the local group.

VicVega: B, C, D. Just follow the model beaten into your brain from NT Server and SITE. LUsers

You want to decrease the amount of RAM that index server uses.(Two)
[] Increase number of Word Lists
[] Decrease number of Word Lists
[] Increase size of Word Lists
[] Decrease size of Word Lists

VicVega: B and D are correct. No inverse relationships here. Word lists reside in RAM, and

decreasing the size and number of word lists will reduce the amount of memory they hog up.

You have a 500MB corpus, how much free disk space does Index server require to index?
[] 1000MB
[] 700MB
[] 500MB
[] 200MB

VicVega: Answer is d. You need 40% of the corpus for an index. b is the amount of space you need

for BOTH the corpus AND the index, for which you may be asked. The other answers are wrong.

You install IIS on a Win95 machine and want to use Index server, what do you need to do?

[] Upgrade the Ram to 16MB
[] Upgrade to NT Server
[] Upgrade to at least a 486/66
[] Upgrade to NT Workstation

VicVega: answer is B. You need NT Server to host Index Server. Workstation will not host it, and

the other options are min requirements for NT Server, which are assumed if you upgrade to NT.

Index server is installed on machine with 64MB RAM and 64MB swap. Index server is moving slow so

you increase the Index Server cache setting and it moves even much slower why?
[] A Master merge is temporarily consuming RAM
[] A Shadow merge is consuming RAM
[] More Index server cache is residing more on the Swap file
[] Index Server has not indexed the new cache

VicVega: answer is c. Sybex TestSuccess confirms this. Other answers are not related to the cache

setting. By increasing the cache setting without increasing RAM, you simply increase the amount of

A guy has one IP address and two virtual servers. 'ow dowze he do eit?
[] Subnet the IP address. Assign each server to a different subnet.
[] Use custom HTTP headers.
[] Assign a different port to each site
[] Configure one site as an FTP virtual server, the other as a WWW virtual server

VicVega: answer B is correct. Custom HTTP headers allow you to assign an unlimited number of virtual servers to a single IP address. Just make sure your Lusers browsers are ver. 1.1. You can't subnet a single IP address, nor can you assign it both an FTP and WWW site without using Host headers. I just made up the different port thing to add a fourth incorrect solution, but now I think about it, that type of crazyness just might work? Forget I even put it up there.

You need to change the port of 200 web sites, what is the quickest way to do this?

a. create a script and run it at the IIS computer
b. create a script and run it at each remote computer
c. create a script and run it at the PDC
d. create a script and run it at each the DNS server

VicVega: Not too sure. C and D are wrong, because the change would not be relayed to any of the

client machines. Running a WSH script on the IIS computer would change the port properties of the

web sites which are HOSTED on the IIS Server. However, are you changing the Web site properties,

or are you configuring the REMOTE computers to connect via the newly specified port. Remember, if

you change the WWW or FTP port on the server, you must configure the clients to use the new port,

NOT the default port. Now I'm completely confused. I'm sure the question on the exam will be more

You've configured a virtual directory called called "White horse". After doing so, some people cannot

access it.
[] Assign NTFS rights to the directory
[] Change name to Whitehorse
[] Assign IIS read permission to the directory
[] Enable read permission to the Anonymous account

VicVega: Answer is B. It is a fact that some browsers cannot handle spaces. Many have problems

Raul needs to change the IIS default web site on the road from his 95 laptop, how?
[] SSL
[] MMC (HTML)
[] PPTP
[] MMC

VicVega: the answer is B. SSL is security, PPTP is a secure internet protocol, and MMC only works

Host headers for IP addresses have been assigned, but it still doesn't work. Why?
[] Make entries in Host file
[] Install modified LMHosts file to the Server
[] Install modified LMHosts file to all the clients
[] Modify the WINS server

VicVega: with these solutions, you would assume that the HOST file has not been configured. If

clients are using a HOST file, it must be manually configured. LMHOSTS is for girly NETBIOS, and

WINS servers a NETBIOSlike as well. Client browsers not supporting the newer HTTP 1.1 which

doesn't support host headers, or the use of SSL which encrypts the header, could also be possibilities,

You need to configure three intranet Web sites. How to segregate? Choose 2.
[] Use Host Headers for Virtual Servers.
[] Three separate IPs, modify DNS.
[] Create three subnets for one IP addresses, and assign a virtual server to each subnet.
[] Create HTML headers for each Virtual Server.

VicVega: both A and B will achieve the required result, although using host headers would only use up

one IP address. Using three IPs will make your sites available to legacy browsers. HTML headers are

different from Host headers, and trying to subnet an IP address is just wacky, making C&D wrong.

You configure multiple sites on a IIS 4.0 server. Both sites share the same IP address, Home

Directory and TCP port. DNS entires have been setup that point each FQDN to the same IP address.

However, when Lusers try to go to the 2nd web site they open up the first.
[] Configure HOSTS files on the server
[] Configure HOSTS files on the clients
[] Configure the clients to use DNS
[] Configure Site 2 to use a Host Header

VicVega: Host Headers differentiate sites with identical ports and IP addresses, however, I still don't

like the fact that both sites share the SAME home direcory. For examply, a home directory can only

handle on default.htm. Shouldn't virtual servers have separate home directories. They should, but I

guess it's not a total requirement. This is not a name resolution problem since since DNS seems to have been set up properly, making A, B and D wrong.

Your Domain name is currently set to one of you subsidiaries, How do you get SMTP mail to appear it is coming from your real companies domain?
[] Masquerade domain*
[] Smart host header
[] Domain name change
[] Change Prettyname

VicVega: A is correct. The star next to it is the giveaway. Smart host headers are used to route

mail over a more efficient or cheaper path, and changing the domain name will mess everything up. D is actually an NNTP option (I didn't make it up.)

You setup an expiration policy on NNTP to expire articles older then 7 days and a size of 500MB. When do articles expire?
[] Articles expire when they are both older then 7 days and when the size of all groups exceeds

500MB.
[] Either when an articles in a group is older then 7 days or when the size of all groups exceeds 500MB

the oldest articles expires.
[] Only when articles in a group are older then 7 days. Date attributes have priority over size

attributes
[] When the size of all groups exceeds 500MB the oldest articles expire. Size attributes have priority

VicVega: B is correct. This is an "either or" thing. If either of the requirements are met, the oldest

You currently store NNTP files in a single virtual directory on a single RAID 5 disk array. How can you

improve performance
[] Create additional virtual folders on the single disk array*
[] Create additional virtual folders on multiple disk arrays
[] Move the virtual folder location onto a non-RAID 5 disk

VicVega: answer is B. Placing multiple folders on the same (single) disk array will do nothing to increase speed. In fact, it will decrease it. When a disk is FILLED with data, it takes longer for the

read/write heads to find and access the data. Thus, you want virtual folders placed on different disk

You have a PERL script setup on one server, you move it to another server but it does not work, what

else is required?
[] Perl interpreter installed on the other server
[] Run FILE to convert it into a Batch file
[] Recompile script
[] Change NTFS permissions

VicVega: This question is like asking "You have an Excek Document, but your computer doesn't have

Excel. What do you need to view the spreadsheet document. You need Excel. Perl programs need a

Perl interpreter installed on the server running them. All other answers are just wind and sails.

John set up 3 Anonymous logins to IIS with different passwords and suddenly nobody can access the

sites. They are using NT Server authenticated logins.
[] John did not change the passwords in LUser Manager to match
[] John did not assign the appropriate NTFS permissions.
[] John did not change the passwords in LUser Manager for Domains to match
[] John must stop and start the WWW service.

VicVega: C is correct. Passwords for anonymous login must be the same as the anonymous Luser

account password in LUser Manager for Domains. A is wrong because LUser Manager is only available in Workstation. With wrong NTFS permissions, tailored error messages would be received, and stopping and starting the WWW service is usually a false beakon of hope.

If you secure the access to a web page called members.theglobe.com/audiomotive (check it out) using

SSL how must you change the URL in order to access the secured page?
[] httpssl://members.theglobe.com/audiomotive
[] http://members.theglobe.com/audiomotive
[] shttp://members.theglobe.com/audiomotive
[] https://members.theglobe.com/audiomotive

VicVega: d is correct. For SSL, you must append that little "s" to the end of HTTP. Just something

There are 2 domains Sales and Marketing (no trust specified). IIS is running on Sales1 in Sales and

wants to index something on the Marketing1 server in Marketing.
[] Make marketing1 part of sales domain.
[] Create an account on marketing1 that can be accessed from Sales.
[] Create a trust between Marketing and sales.
[] Blow up the computer with a stick of dynamite.

VicVega: answer is b. LISTEN UP, PEOPLE!!! Everyone says a, but I can't think of a more wrong

answer. First of all, it's exteme. The server is in the marketing domain for a reason which is more

compelling than your need to index a single directory. Secondly, if it's not a member sever, you will

have to reinstall the entire operating system, which could possibly wipe out everything on the server

anyways. Finally, and more to the point, Microsoft is not testing you on your ability to move servers

around, or at least I couldn't find it on the IIS4 objectives list. When in doubt, say to yourself

"yeah, blowing up this computer with a stick of dynamite MAY IN FACT be the best solution, BUT is

Microsoft testing me on my ability to blow up computers with a stick of dynamite." Then choose an

NT has a seamless logon directory structure, and that's why we love it. Just create a local account on

that Server, assign permission to the folder to that local group,and when you create your virtual

directory, you will be asked to provide a Luser name and password. Provide the one you created, and

from then on, virtual directory browsing will be easy and seemless. And you won't have to reinstall the

You enable SSL on a virtual directory. A Luser is complaining that they can not see any files, but you

can. What do you do?
[] Install an SSL capable browser on the client.*
[] Allow the Luser to log on locally to your server.
[] Add RAM to the Lusers computer.
[] Stop and start the WWW service.

VicVega: always go with the one with the star next to it, A. Some browsers cannot use SSL. All

You have a separate directory for each client and they are only allowed to access their own directory.

What it the best security method?
[] Make each client an operator for their own directories only.
[] Client certificates.
[] NTFS permissions.
[] share permissions.

VicVega: B is the answer. Client certificates positively identify the client to NT. A is wrong. It is

like making Lusers part of the administrators group for IIS4. C would work, but this isn't the NT

Server exam, so stick with SSL and Certificates. Share permissions will never be the right answer on

Managers have access to a special directory. Mary is promoted to manager, but she can not access the directory. Mary has the same permissions as Bill, who can access the directory. What do you need to do so that Mary has access?
[] Stop and restart the WWW service.
[]You need to adjust her NTFS permissions.

Many believe A is correct, but I don't. I can't remember any questions in the SITE exam being

answered with "Stop and start the WWW service." Furthermore, I have changed NTFS and IIS4

Virtual Server Properties permissions (read, write, script, execute etc) until the cows come home, and

SERVICE HAD ANY EFFECT ON LUSER OR GROUP PERMISSIONS. If you do, e-mail me at

[email protected], and I will send the first debunker a free bottle of Canadian Maple

This question is most likely a rights issue. You probably have to remove Mary from some group she used to belong to that has no access. The answer would be b, to adjust her NTFS permissions.

You must setup a private web site, what can you use to authenticate to it
[] Certification Server*
[] Transaction Server
[] Site Server
[] Stop and start the web service

VicVega: answer is A. For authentication, Certificate Server is the moist choice.

Becky logs onto a sensitive web site and it is set up to use Basic Authentication. What is Encrypted?
[] Password and Data are encrypted
[] Password is encrypted, Data isn't
[] Data is encrypted, Password isn't
[] Nothing is encrypted*

You want to get the most performance out of your IIS server. What is the best way to secure

sensitive directories?
[] Enable SSL only when required*
[] Enable SSL all the time
[] Use the client certificate
[] Move SSL directories to a separate

VicVega: answer is A. SSL encrypts the data using a pretty intense 40 or 128 bit code. The

encryption process in processor intensive, and the encrypted data is more verbose, placing a load on

You are logging WWW with text logging and you want to know where to find the number of page hits?
[] Event Viewer
[] Using site server express to import
[] Stop and start the WWW
[] In the log file

VicVega: B IS CORRECT. This may SURPRIZE you. A amd C are obviously wrong. However, everyone says "In the Log file." EVERYONE IS WRONG. I opened up a log file I created, and this is what I found: s-port cs-version cs(LUser-Agent) cs(Cookie) cs(Referer) 1998-11-13 23:57:28 112.112.112.1 - W3SVC3 PDC1 112.112.112.111 GET /Default.htm - 200 0 435. Now if you can work out the number of hits from that bafflegab, you are a better Cam than me.

I then imported that same log file using Siter Server Express. This is what was immediately output on

the screen: 13 hits couldn't be parsed 32 hits were to an unconfigured site. THAT IS A DIRECT CUT

Go against the wave of public opinion and get this question right. C is the only correct answer.

You access a web page and you want to use Site server to download the web page and all it's links. Do

you set up site server to download by specifying url name or the physical directory???
[] File Name
[] URL Name
[] UNC Name
[] PrettyName

VicVega: answer A is the only correct answer, although A is a legitamate option. C and D are not Site

Server options. By specifying a URL, you have the option to download all files from the URL to disk

(although my option was always browned out, & I couldn't get it to download any of those educational

sites I like visiting). File name will not give you this option, though, if the files are already on your

You want to determine all files on your website which are greater than 32K, what do you use?
[] Site Server Express
[] Use the NT Explorer to search the web site dir
[] Use Find and do an advanced search for files over 32K with .htm extensions
[] Stop and start the WWW service

VicVega: answer is A. Site server allows you to do this and a host of about 10 other neat things,

including verifying links and finding all images without alt tags. You should be familiar with all the other

People have said B and C. These WON'T work. They won't even cone close to working. They are not

even plausable options. When SS looks for pages greated than 32K, it isn't just the HTML code that is

over 32K, but the accumulation of all links, images, sounds etc. displayed ON the page. It is the

ACCUMULATED TOTAL of ALL content used on that particular HTML document, not just the HTML of

What IIS entries would be stored in the IIS Metabase.(Two)
[] Location of the IIS helpfiles
[] Virtual Folder security information*
[] Home Directory permissions*
[] Index Server settings
[] Site Server Express settings

Someone elses answer:
Know that the metabase stores IIS settings, like permissions and locations of home directories for

different webs. It does not store Site Server, Index Server and other settings. The question I had

was easy since it asked to click only two choices. NOTE: IIS help files are not located in the

metabase. As a litmus test: if having the setting in the metabase would not speed up performance of

the server as it deals with people browsing the server, then it is there (good reason why help file

You want to enable logging of your web site. What option should you choose to allow the lowest

processing overhead.
[] Normal Text Log
[] Compressed Normal Text Log
[] Logging to a SQL database
[] Logging to a remote SQL database

VicVega: Normal text log should be the answer. B is wrong because compressing a file usses processing overhead. Logging to an SQL database would absolutely require more processing overhead if the SQL database was on the same computer.

Here's the rub: if you log data to a REMOTE SQL database, would the data be immediately

redirected, causing NO processing on the local computer? Would this unload all of the processing

overhead to the remote SQL machine, or is the data formatted on the local machine before being sent

to the remote SQL database? If so, D could plausably be the correct answer. Choose for yourself,

but I'm going with a. Does simply redirecting the data create processing overhead? Time to crack

Furthermore, remember, there is NO "Log to text file" option in the MMC. The closest option is

"Microsoft IIS Log format" which uses a fixed asskey format, while "NCSA" also uses a fixed asskey

format (according to Sybex, this uses the least processing overhead). "W3C" is a CUSTOMIZABLE

Where are MIME mappings stored?
[] In a log file
[] In the registry
[] In the metabase
[] In the performance monitor

"My neighbour's a MIME. I played a blank tape full blast last night and it drove him crazy."
-Steven Wright

VicVega: MIME's are stored in the metabase, but don't take my word for it, prove it to yourself. Go

to the MIME map page and click "New type." type ".vic" as the associated extension, and type

"text/plain" as the "Content Type(MIME)." (If you don't do it now, you might have to do it on the

exam-be warned).Click OK and APPLY, and then do a "find" (from your start menu) for files and folders.

Do a date "FIND" for all files changed within the previous one day. When it's done, look for a file

called "metabase.bin," and notice when the file was "Last Modified." You will notice that it was

modified the same time you changed the MIME type, while no files in the registry location have

The confusion here comes from the fact that there ARE mime types stored in the registry, but these

mime types have to do with how the desktop operating system renders files to the Luser sitting in front

of the computer. Win95,98,Workstation and NT all have MIME types stored in their registry. Just

search for them with REGEDIT and you will find them. The difference is the fact that the

METABASE stores various MIME Mappings for your virtual servers and for formatting data being sent

You have a document called *.stm which is being read as an htm document. How do you change the mime mapping of
[] Text/stm mime
[] Text/htm mime
[] Text/plain mime
[] stm/Text mime

VicVega says b. The .stm extension is being interpreted as an HTML document. You don't want it to

be. The current MIME mapping for .stm is Text/htm, so this mime mapping is what must be changed,

thus B is correct. What should it be change to? Who cares, it's not being asked.

HTMH to associate with html?
[] HTMH --> text/html MIME setting*
[] html-->text/HTMH MIME setting
[] htmh-->text/htmh MIME setting
[] html-->html/text MIME setting

VicVega: answer is a. You specify the extension, and then specify how it should be associated.

What are the minimal requirements for Index server?
[] The same as IIS4.0 and 4-12 mb free disk space
[] A computer running NT Workstation
[] A computer running Win 95 with 16 MB of RAM
[] A computer running PWS

VicVega: A is right. IIS won't run on Workstation or 95, and PWS does not exits on NT Server.

Web Site configured to allow only a group of IP addresses to access it. The set-up was: 192.168.0.96

(Sub Mask 255.255.255.224). What range of addresses allowed?
[] 192.168.0.96 - 192.168.0.127
[] 192.168.0.89 - 192.168.0. 120
[] 192.168.0.91 - 192.168.0.132
[] 192.168.0.95 - 192.168.0.129

VicVega: Only A is correct. A mask of 224 increments in intervals of 32 (256-224=32). Only numbers

within this 32 number interval will be on the same subnet. The trick is you start counting at zero, so

the range is 0-31, 32-63, 64-95, 96-127, not 1-32, 33-64, 65-128. 192.168.0.96 will only fall within

You have a document called *.stm which is being read as an htm document. How do you change the mime mapping of
[] Text/stm mime
[] Text/htm mime*

VicVega: The term "Freindly Names" is disturbingly ambiguous. Does this mean friendly NETBIOS

names, or does this mean FQDNs. if two are asked for, it is obviously WINS and DNS which both

handle name resolution; together they are a very powerful tool. If only FQDN is required, DNS is the

only answer, the opposite for NETBIOS. DHCP does not provide name resolution, and PC Makers Can't Invent Acronyms (PCMCIA) is not a viable alternative.

DNS is not enabled and you want to connect to a virtual directory "\70-87\index.htm" on Server1 with

VicVega: answer is A. If you know the IP address, FQDN's and NETBIOS names are just frills. B

and D require name resolution methods, which are not available, and C does not specify the directory.

Type answer A into your browser--you should get the Braindump's IIS4 index page.

Connect to and index files on a virtual directory on a Netware server.
[] Create iusr_computername account on Netware server and assign read permissions.
[] Use NT Migration tool for Netware to connect to the Netware server.
[] Create iwam_computername account on Netware server and assign read permissions.
[] Connect using Client Services for Netware (CSNW).

VicVega: don't make this question harder than it needs to be. You simply create a Luser account on

the Netware server that will be used to index the file, and index the file using that account. B and D

are obviously incorrect. The problem here is "WHAT LUSER ACCOUNT DOES INDEX SERVER

USE???" Does index server index directories using the iusr_computername account which is used for

anonymous logon, or the iwam_computername account which is used as the "Internet Server Web

Application Manager." Both accounts are automatically made by IIS4 on installation. To be honest, I

don't know which one is used to index virtual directories. Answer is either A or C.

You've implemented DNS. You have 3 virtual webs. You change the IP address of your IIS server.

Clients cannot now access. How to do?
[] Change DNS entry for IIS server
[] Change DNS address on all clients
[] Modify the HOSTS file on all clients
[] Modify the LMHOSTS file on all clients

VicVega: answer is A. The DNS server has not been updated to reflect the new IP address of the

You have a high no. of not found errors on your web site. Why? (choose 2).
[] Wrong virtual directory configuration
[] Wrong permissions for anonymous account
[] Excessive traffic on network segment
[] Errors in HTML code on pages*

VicVega: I have a major problem with this one. I can only thing of one correct answer for this one.

The 404 error is a "File Not Found" Error. This would positively happen if a virtual directory was

misconfigured. People would be looking for items in folders that don't exist, so a 404 error would be

returned. Answer is A. But apparently you are supposed to choose TWO answers.

Wrong permissions would not result in a 404 error. For example, incorrect NTFS restrictions would

cause a 401.3, access forbidden error, so B is not correct. Excessive traffic on the network would not cause a 404 error, but a 403.9, Access Forbidden error.--> "This error can be caused if the Web server is busy and cannot process your request due to heavy traffic." That quote is cut and pasted from the actual 403.9 error. Check it out yourself at: "C:\WINNT\Help\common\403-9.htm". Furthermore, if the request times out due to heavy traffic, you get a timeout display message, not a 404. Though 403.9 is only .1 away from a 404, close only counts in horseshoes and handgrenades.

Errors in HTML code do not cause 404s. If there are html errors in the code the browser will still

"find" the file and download it, it simply won't be rendered properly. We've all seen those sites where

some poor suckers HTML code is blazoned across the screen because she missed a tag or two. Now if there was an http error, such as an incorrect host header, then this error could occur, but this is

If forced to pick two, I would choose not to decide, but even then I would have made a choice. The

You place half of the images in the c:\inetpub\donortextiles\images\directory. LUsers report that only

the images located in the hoe directory are displayed when they access the web site. You discover that one of the images that does not display is reference by a link to:

The Virtual Directory is c:\inetpub\wwwroot\images but the directory you put the files in is actuallu

c:\inetpub\company\images. So the answer is to remove the virtual directory.

Trouble with slow access on IIS computer. Discover via performance monitor that the server has low

processor usage and high network bandwidth usage. What should you do?
[] Add RAM
[] Add another network adapter
[] Increase size of paging file
[] Increase timeout connection for your web site

VicVega: problem is with the lack of network bandwith. Add another network adapter, B.

Your web site uses virtual directories on 4 servers. You want to create a summary of all images on your

site. How?
[] Issue query using index server
[] Browse site using ISM
[] Search for image extensions in Explorer
[] Generate images report from site server express

VicVega: Site server express will generate the report. From the IIS4 Help files:
Images Report _image.html--> lists and provides details about the images on the site. C could work, but could get sticky if virtual directories are on remote servers and would be ugly time consuming at

best. Remember, this is an IIS4 exam, not Windows 95. I'm sure some funky programmer could get

an index query to return this kind of data, so theoretically A could be correct, but not Microsoft

How can you decrease the number of threads used by Web apps?
[] Add RAM to IIS computer. ***will do nothing.
[] Run all Apps in a separate memory space* ***lesser of the four evils it seems.
[] Replace ISAPI apps with CGI scripts-**will increase threads. ISAPI good. CGI bad.
[] Authenticate Lusers by using an ISAPI filter **has no relavence whatsoever. why authenticate them

VicVega: This question makes no sense to me. Adding ram may shuffle threads out of paged memory, but it shouldn't decrease the amount. Either a program takes a thread or it doesn't. You can't magically make them disappear. ISAPI is a M$ standard, and will never be replaced by CGI in a

microsoft exam. Besides, ISAPI apps use less threads than CGI. Authentication is a misnomer. If

you want to decrease threads, leave authentication to NTFS or the MMC. If you really want to

Running apps in a separate space should increase threads by one per app, as each memory space would consume an extra thread. However, Sybex TestSuccess argues this is the correct answer with some doubletalk about isolating rampant threads that are out of control or something. I have to go with

You've grouped together all CGI scripts and ISAPI apps into the scripts folder and assign execute

rights to the folder. Afterwards, the ISAPI works and the CGI doesn't.
[] Assign read and write rights for the folder as well
[] Assign NTFS execute permission.
[] Place CGI and ISAPI files in different directories.
[] Stop and start the WWW service.

Vic Vega: this question is a giant killer, so all those PAPER MCSE's who have never programmed a CGI script in their life, listen up.

The answer is A. CGI scripts and ISAPI scripts need EXECUTE permission to run, both on NTFS and

through the MMC. If either permission is missing, neither ISAPI nor CGI scripts will run. Since the

ISAPI works, there is NO PROBLEM with execute permissions. HOWEVER: many CGI programs not

only execute, but read and write to the folder as well. Take a counter, a CGI program that counts

page hits. When a page opens, the CGI program EXECUTES. It then READS a text file stored in the

same folder that contains the current number of hits. The program, still executing, sends that number

to the browser, increments the value in the text file, and then SAVES the newly changed text file to

the folder. If any of the READ, WRITE or EXECUTE permissions at either the MMC or NTFS level

are not assigned, the CGI script will fail, and appear as though it never even executed. You should now

CGI and ISAPI can be placed in the same directory, and in fact, often are, making C wrong, and don't

You set up an FTP site and set up a virtual directory and set the listing to UNIX. Afterwards, not all

Lusers can access it.
[] Assign NTFS rights.
[] Set listing styles to MS-DOS.
[] Assign READ permissions to the folder.
[] Stop and start the WWW service.

VicVega: Some ftp programs have problems using UNIX notation. Change the listing style back to

Microsoft's fine MS-DOS and you should be fine. Since some people can access the FTP site, it isn't a permission or read problem. You can safely assume, if not explicitly stated, anonymous access is

enabled for FTP sites. This is not a PRINT SPOOLER question. Don't stop and start anything.

You have 2 servers (NY and Ontario), what's the easiest way to to change the IP ports on the 200

sites contained at those locations?
[] Use Inet Server Manager to change individual ports
[] Inet Server Manager HTML to change individual ports
[] Write a VB script and run it on both sites
[] Write a VB script and run it on one site

VicVega: writting a script and running it on both sites is the answer. ".WSH Scripts can not be run

remotely." (Sams, 374) through IIS soas to secure the site from hackers and crackers. A and B

This question best exemplifies the difference between the "right answer" and the "Microsoft" answer.

Being from Ontario, I know that running a script like this in Canada is not that easy. You first need a

municipal permit, then you need provincial approval, and then federal approval because nobody is sure

whose jurisdiction script running is. Then you must have an environmental assessment to assess the

impact of the port change on the local environment, and then, after paying a hefty tax, you might be

allowed to run the script. Ahh, living in Canada. But for Microsoft C is acceptable.

time & Resolution time. What should you do?
[]Increase cache period of IP lookups for importing log files0
[]Decrease cache period of IP lookups for importing log files
[]Increase IP address time out resolution time
[]decrease IP address time out resolution time
Answer: D

VicVega: a and b should be eliminated immediately. Why? Cache period is set in units of DAYS. Since you import 2 logs PER DAY, the cache time is already greater than the import interval. This would only improve resolution time if the import interval was GREATER than the cache period.

The IP address time out interval is the amount of time usage import will attempt to resolve an IP

address. If it tries to resolve an unresolvable address for 10 seconds, then importing will take an exra

ten seconds for every unresolvable address. If you change the value to 5 seconds, the import will only

***PG 222, NEW RIDERS: "Timeout resolution engables you to set the number of seconds for usage

import to attempt to resolve an IP address. After this time, Usage Import will stop attempting to

resolve the IP address. HIGHER VALUES MEAN BETTER RESULTS, BUT WILL SLOW DOWN THE

Which options would require multiple certificates?
[] Server hosting web sites for multiple companies*
[] Server has links to servers in differnt domains*
Roberta agrees
[] When your IIS hosts virtual servers for multiple companies
[] When your virtual server is spread amoung many virtual directories accross various locations
[] When your IIS hosts virtual directories for the same company in one location
[] When your certificate server is installed on more than one server

[] When your IIS hosts virtual servers for multiple companies
[] When your virtual server is spread amoung many virtual directories accross various locations
[] When your IIS hosts virtual directories for the same company in one location
[] When your certificate server is installed on more than one server

You want to host three web sites on a single IIS computer. Ten Lusers will need to be able to access

VicVega: d, only NT server can accept more than one simultaneious connection.

VicVega: A and B. Performance monitor has all sorts of IIS4 objects, and an .ida script within an

You want to install IIS to support an intranet web site for the SALES,ACCOUNTING, nd MARKETING

department of your company. All of the client computers in each of these departments use web

The requirements for each department are:
Sales Accounting Marketing
unique name unique name unique name
secure directory secure directory secure directory

[] install iis on one windows nt server computer, implementing NTFS security and host headers to provide a unique URL for each department.

VicVega: this is the whole point of IIS4. If you don't understand this, forget about taking this exam.

You are the administrator for an ISP. The ISP supports a variety of web sites on a single IIS

computer. You went to one of the web sites and recieved the following error: h t t p Access

forbidden-This virtual directory requires a browser that supports the configured encryption option.

[] the web site is using SSL
[] the web site is using Basic Authentication
[] the web site is using Anonymous connections
[] the web site is configured with an incorrect IP address.

You suspect that there is a CGI script running on this server that is not releasing threads. What should

[] Use Perf. Monitor to monitor the threads\threads state counter
[] Stop and start the WWW service of your IIS computer
[] Use Perf. Monitor to monitor the IIS globe cache fault headers counter.
[] Use Event Viewer to monitor the application faults.

VicVega: A, the thread\thread state counter will tell you the active state of any thread. If a

distribution on a Microsoft SQL server database. You want to index all of the data in the text files by

using microsoft index server. You want to create a query the results of the text pages and publish the

[] Write a PERL script
[] Write ISAPI application that indexes the text files, queries the resulting index and then uses SQL

to query the SQL database
[]Write an ASP that uses Index server query language and that uses SQL extentions to Index server

to query SQL
[] Write a CGI script that executes an Index server query and queries the SQL database.

VicVega: Answer is C. Never answer "Write a perl script" or "CGI Script" on a Microsoft exam. M$

did not invent perl, so it is crap. Same with CGI. The ISAPI option might work, but is pretty

Answer C needs some interpreting. You know how Index server can index all sorts of files including

Excel, Word, HTML etc. Well, that is done through EXTENSIONS, and you can get extensions for

just about anything, ESPECIALLY SQL databases. If you add an SQL extension, then index server

willautomatically index the SQL Database and store it in a Master file with all the HTML and text

stuff. To access it, you just have to write an ASP script, and go figure, Microsoft just happend to

How to create own custom errors?
[] Properties of website Custom errors tabs and assign errors to created files

45. You setup a web site on your intranet. Clients use different browsers. When some clients try to

access pages they receive an error message like "Error 403 Browser does not support required

encryption method"
[] SSL certificate on server is invalid
[] Site is using NT Challenge/Response authenication method*
[] Browser does not support SSL
[] Something else

VicVega: Note, when you log in to a server using CHAP, and your browser doesn't support it, the error

you get is: "HTTP 401.2...Server configuration error...Credentials passed do not meed credentials

required...You did not send the appropriate WWW-authenticate header file." Answer must be C, site

is SSL enabled and your browser doesn't support SSL. Errors 403.4 and 403.5 correspond to SSL

encryption errors. When a certificate is invalid, you receive a "403.7: Client certificate required"

You have two sets of Lusers. Some access your NNTP site via a local intranet, some externally via

Internet.The external Lusers have browsers that cannot use NT Challenge/Response. How do you set up your site for secure access for both Internet and Intranet Lusers?

[] SSL
[] One for NT Challenge/Response plus Anonymous
[] One for Basic Authentication

VicVega: Got to be SSL. B is out for sure, and Basic Authentication is a HUGE security hole which

You are preparing to install Index Server onto your server that will index 321,000 documents. What is

Less than 100,000 is 32 MB of RAM
100,000-250,000 documents , 64-128 MB of RAM
250,001-500,000 is 128-256 MB
over 500,000 documents is 256 MB or more is recommended.

These are frustrating. As someone said in another dump, "don't miss these, they're gimmies." Problem is, many people have different answers. To make matters worse, I just went to Chapters to look up

These were errors and answers from Sybex TestSuccess, the best IIS4 book currently out there. Pick

ODBC ERROR-->LogIN Failure: Insufficient permission do access a database RESOURCE, i.e., you are not a valid Luser of a trusted SQL server connection.

ODBC ERROR-->LogON Failed: You do not have a valid account for even logging INTO the SQL

NOTE THE SUBTLE DIFFERENCE BETWEEN logIN and logON failures. Few people have pointed out

ODBC ERROR--> Data Source not found and no default driver is specified: apparently this occurs

when a the Global.asa cannot execute properly, making it a PERMISSION problem. Give the Global.asa file execute permissions, and you will not get this file.

ODBC ERROR--> General Network Error: Sybex really threw me here. They suggest this can be

produced by changing from NETBIOS to NamedPipes, which is an option given by Microsoft, but I have

never seen anyone pick it in the dumps. Many dumps contend this error occurs when the database has been moved. Patric De Boer's ODBC error site contends that "this may occur when a SQL server

computer is renamed. DSN's that reference the old name fail when the computer name cannot be

ODBC ERROR--> Cannot Find Namespace: Sybex contends this is the error that occurs when a

ODBC ERROR--> File opened exclusively or permission to view file is missing: this can be caused by a file being opened already by someone else, BUT is MOST LIKELY caused by lacking a file permission. Make sure you know if the question is asking for all possible causes, or the MOST LIKELY cause.

You will find little consensus on these answers. Explore the dumps and come up with your own

You configure you web page to access an SQL database. When trying to access, you get the error

*********************************************************************************************
Here's some other stuff of which I have no comments. Caveat Emptor!!!

You want to configure all web sites for your company to the same standard. How?
[] Use Windows Scripting Host*

VicVega: As a person who has written many a web page, I am unsure of how you could use WSH to

create web pages. I must be misinterpreting the question. However, Sybex contends this is the

Site Server Reports Hourly on Web site, some ips are not logged
[] Because it's setup to discard open visits on the turnaround *
[] Setup to commit open visits
[] Can't resolve client IPs to Hosts
[] Clients have invalid IP

You publish 100 web pages that show several common elements. These web pages are updated 3 times a day. You want to minimize the effort required to modify the elements that are common to all the web

[] Use Server side includes. Include directives in the HTML files
[] Rename the HTML files with ASC extensions
[] Create a common IDC file for all HTML files
[] Create a HTX file that corresponds to each HTML page

Without any other data, which path to the home directory( or folder) do you have to fill in the box

Good luck. After I write, I will be attempting SQL Admin, SQL Implementation and IE Admin.

Anyone with any good info or files who has been helped by this dump, feel free to send them to me at