why are there 2 web.config files

Question

Someone sent me over a link to download the sample standard asp.net MVC sample, I noticed that there were 2 web.config files:

1. 1 in the root directory

Answer 1

The web.config in the Views directory just has one significant entry, which blocks direct access:

This is so someone cannot manually try to go to http://www.yoursite.com/views/main/index.aspx and load the page outside the MVC pipeline.