I'm going to sound like a complete newbie here but can anyone suggest an optimum hardware configuration for IIS & MSSQL server ( assume load balancing and fail-over is required)?If not suggest any ...

A free download, the Web Application Configuration Analyzer scans IIS servers, hosted applications, and SQL Server instances for common security issues and misconfigurations.

However, even the most meticulous and security-aware C# or VB.NET code can still be vulnerable to attack if you neglect to secure the Web.config configuration files of your application.