Yes.
The IUSR_machiname, or any account being used for anonymous access, must have interactive logon.
Limited. The request can leave the Web server and access resources on a remote computer so long as the anonymous account exists on both computers and the passwords are the same.
No.
All.
Yes.
Technically, this is not an authentication scheme.