nerdexam
GIAC

GSEC · Question #380

When an IIS filename extension is mapped, what does this mean?

The correct answer is B. The file and all the data from the browser's request are handed off to the mapped interpreter. In IIS, mapping a filename extension associates that extension with a specific handler so that matching requests are forwarded to that interpreter for server-side processing.

Cloud, Web, and Application Security

Question

When an IIS filename extension is mapped, what does this mean?

Options

  • AFiles with the mapped extensions cannot be interpreted by the web server.
  • BThe file and all the data from the browser's request are handed off to the mapped interpreter.
  • CThe files with the mapped extensions are interpreted by CMD.EXE.
  • DThe files with the mapped extensions are interpreted by the web browser.

How the community answered

(51 responses)
  • A
    2% (1)
  • B
    82% (42)
  • C
    10% (5)
  • D
    6% (3)

Why each option

In IIS, mapping a filename extension associates that extension with a specific handler so that matching requests are forwarded to that interpreter for server-side processing.

AFiles with the mapped extensions cannot be interpreted by the web server.

Mapping an extension enables interpretation, not prevents it - unmapped extensions are what IIS typically cannot execute.

BThe file and all the data from the browser's request are handed off to the mapped interpreter.Correct

When IIS maps a filename extension to an interpreter (such as an ISAPI DLL or CGI executable), any HTTP request for a file with that extension causes IIS to pass both the file path and the full request data to the mapped handler. The handler then processes the file server-side and returns the output to the client, enabling dynamic content generation for extensions like .asp, .php, or .pl.

CThe files with the mapped extensions are interpreted by CMD.EXE.

Mapped extensions are handed to the specific interpreter defined in the mapping configuration, not generically to CMD.EXE.

DThe files with the mapped extensions are interpreted by the web browser.

Interpretation of server-side scripts occurs on the web server, not in the client's web browser.

Concept tested: IIS filename extension mapping and request handling

Source: https://learn.microsoft.com/en-us/iis/configuration/system.webserver/handlers/

Topics

#IIS#filename extension mapping#web server#script interpreter

Community Discussion

No community discussion yet for this question.

Full GSEC Practice