Audit Your Web Server
After you complete Tech Challenge 5 (Installing your web server) and Tech Challenge 7
(Visual Studio 2015 Installation and First Web Application) you will now audit some key
components of your web server and web application.
Below you will find some
questions about some key items to look at when auditing a web server.
I am looking for
you to research methods of determining this information, provide screenshots of the
web server information, and provide a descriptive explanation of why this control is
important and any other thoughts about your findings.
1.
What is the root path of your Web Server?
2.
What ports are running on your web server?
3.
What application pool is running the application your created in the previous
activity?
4.
Verify how many Application Pools are running on your Web Server
5.
What accounts are running the application pools?
6.
What security type of security is enabled for your application?
Provide a
definition of each type listed.
7.
What user accounts can access your web server?
8.
What user accounts can access your web application?
