Question: what are the steps you took to harden iis?
Answer: Harden the OS. ... 
IIS Install and Initial Cleanup. ... 
Use Security Configuration and Analysis. ... 
Choose The Best Authentication Method for The Purpose. ... 
Use NTFS and Virtual Directory Permissions. ... 
Install Hotfixes and Service Packs. ... 
Evaluate Other Security Tools. ... 
Enable Logging (And Use The Results)