IIS 7.x: Getting 404.7 error for “/” root requests after Disabling Allow Unlisted file extension
To secure the IIS 7.x one of the recommendation is to change the Request Filtering => FIle Extensions: To Allow only the known extensions.
For example : Default values in IIS 7.x Request Filtering => File Name Extension on IIS