Visible Files

Which directories and files are visible and readable for a (hacking) user at a Website:

a)directories in the default website (obviously: YES)
b).asp-files in the default Website
c).asp-files in any diretory outside the default Website
d)virtual directories, with files, referred to in the Website
e)any virtual directory, with files, set up in IIS
f)any other directory and file on the server computer that you know the local physical path to
g)any other directory and file on the server computer that you know a valid URL to.