[2021] Use Valid Exam AZ-220 by ITPassLeader Books For Free Website
Free Microsoft Certified: Azure IoT Developer Specialty AZ-220 Official Cert Guide PDF Download
NEW QUESTION 51
You have an Azure IoT solution that includes an Azure IoT hub, 100 Azure IoT Edge devices, and 500 leaf devices.
You need to perform a key rotation across the devices.
Which three types of entities should you update? Each Answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. the leaf module identities
- B. the IoT Edge device identities
- C. the iothubowner policy credentials
- D. the $edgeAgent module identity
- E. the leaf device identities
- F. the $edgeHub module identity
Answer: B,E,F
Explanation:
To get authorization to connect to IoT Hub, devices and services must send security tokens signed with either a shared access or symmetric key. These keys are stored with a device identity in the identity registry.
An IoT Hub identity registry can be accessed like a dictionary, by using the deviceId or moduleId as the key. Reference:
https://docs.microsoft.com/bs-latn-ba/azure/iot-dps/how-to-control-access
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-identity-registry
NEW QUESTION 52
You have an Azure IoT hub named Hub1 and a root certification authority (CA) named CA1. Hub1 is configured to use X.509 certificate device authentication.
You and a custom manufacturing partner complete a proof of possession flow.
You plan to deploy IoT devices manufactured by the custom manufacturing partner. Each device will have a certificate generated by an intermediate C You need to ensure that the custom devices can connect successfully to Hub1.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Sign the intermediate CA certificate by using the CA1 certificate.
2 - Sign the device certificate by using the intermediate CA
3 - Deploy the certificate chain to the device.
Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/concepts-x509-attestation
NEW QUESTION 53
You have an Azure IoT Central application.
You need to connect IoT devices that use SAS tokens to the application without first registering the devices.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Obtain the group primary key
2 - Generate device SAS Keys.
3 - Flash unique credentials to the devices.
4 - Connect the devices to IoT Central
5 - Associate the devices to a template and approve the connections.
Reference:
https://docs.microsoft.com/en-us/azure/iot-central/core/concepts-get-connected
Topic 1, ADatum
Requirements
Planned Changes
ADatum is developing an Azure IoT solution to monitor environmental conditions. The IoT solution consists of hardware devices and cloud services. All the devices will communicate directly to Azure IoT Hub.
The hardware devices will be deployed to the branch offices and will collect data about various environmental conditions such as temperature, humidity, air quality, and noise level. The devices will be wired by using Power over Ethernet (PoE) connections.
ADatum is developing the solution in the following three phases: proof of value (POV), pilot, and production.
Requirements. POV Requirements
The POV phase will demonstrate that a technical solution is viable. During this phase, 100 devices will be deployed to the main office and Azure Stream Analytics will be connected to an IoT hub to generate real-time alerts. Stream Analytics will perform the following processing:
Calculate the median rate of the telemetry across the entire devices that exceed the median rate by a factor of 4.
Compare the current telemetry to the specified thresholds and issue alerts when telemetry values are out of range.
Ensure that all message content during this phase is human readable to simplify debugging.
Requirements. Pilot Requirements
During the pilot phase, devices will be deployed to 10 offices. Each office will have up to 1,000 devices.
During this phase, you will add Azure Time Series Insights in parallel to Stream Analytics to support real-time graphs and queries in a dashboard web app.
The pilot deployment must minimize operating costs.
Requirements. Production Requirements
The production phase will include all the offices.
The production deployment will have one IoT hub in each Azure region. Devices must connect to the IoT hub in their region.
The production phase must meet the following requirements:
Ensure that the IoT solution can support performance and scale targets.
Ensure that the IoT solution support up to 1,000 devices per office.
Minimize operating costs of the IoT solution.
Requirements. Technical Requirements
Datum identifies the following requirements for the planned IoT solution:
The solution must generate real-time alerts when a fire condition is detected in an office. All the devices in that office must trigger an audible alarm siren within 10 seconds of the alert.
A dashboard UI must display alerts and the system status in real time and must allow device operators to make adjustments to the system.
Each device will send hourly updates to IoT Hub. Condition alerts will be sent immediately.
Multiple types of devices will collect telemetry that has different schemas.
IoT Hub must perform message routing based on the message body.
Direct methods must be used for cloud-to-device communication.
Reports must be provided monthly, quarterly, and annually.
Stored data queries must be as efficient as possible.
The device message size will be under 4 KB.
Development effort must be minimized.
Requirements. Throttle and Quotas
The relevant throttles and quotas for various IoT Hub tiers are shown in the following table.
Requirements. IoT Hub Routing
You plan to implement IoT Hub routing during the POV phase as shown in the following exhibit.
NEW QUESTION 54
You have 1,000 devices that connect to a standard tier Azure IoT hub.
All the devices are commissioned and send telemetry events to the built-in IoT Hub endpoint.
You configure message enrichment on the events endpoint and set the enrichment value to
$twin.tags.ipV4.
When you inspect messages on the events endpoint, you discover that all the messages are stamped with a string of "$twin.tags.ipV4".
What are two possible causes of the issue? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Message enrichment cannot be added to messages going to a built-in endpoint.
- B. The device sending the message has no device twin.
- C. The device twin property value used for message enrichment is set to "$twin.tags.ipV4".
- D. The device twin path used for the value of the enrichment does not exist.
- E. A standard tier IoT hub does not support device twin properties in message enrichments.
- F. The ipV4tag is a restricted twin property that is unavailable for message enrichment.
Answer: B,D
Explanation:
In some cases, if you are applying an enrichment with a value set to a tag or property in the device twin, the value will be stamped as a string value. For example, if an enrichment value is set to $twin.tags.field, the messages will be stamped with the string "$twin.tags.field" rather than the value of that field from the twin. This happens in the following cases:
* (C) Your IoT Hub is in the standard tier, but the device sending the message has no device twin.
* (E) Your IoT Hub is in the standard tier, but the device twin path used for the value of the enrichment does not exist. For example, if the enrichment value is set to $twin.tags.location, and the device twin does not have a location property under tags, the message is stamped with the string "$twin.tags.location".
* Your IoT Hub is in the basic tier. Basic tier IoT hubs do not support device twins.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-message-enrichments-overview
NEW QUESTION 55
You have an Azure IoT Central application that monitors 100 IoT devices.
You need to generate alerts when the temperature of a device exceeds 100 degrees. The solution must meet the following requirements:
* Minimize costs
* Minimize deployment time
What should you do?
- A. Perform a data export to Azure Blob storage and create an Azure function.
- B. Create a rule that uses an email action.
- C. Create an email property in the device templates.
- D. Perform a data export to Azure Service Bus.
Answer: B
Explanation:
Explanation
Explanation:
You can create rules in IoT Central that trigger actions, such as sending an email, in response to telemetry- based conditions, such as device temperature exceeding a threshold.
Reference:
https://docs.microsoft.com/en-us/azure/iot-central/core/howto-configure-rules-advanced Implement security Question Set 1
NEW QUESTION 56
You have an Azure IoT hub that uses a Device Provision Service instance.
You plan to deploy 100 IoT devices.
You need to confirm the identity of the devices by using the Device Provision Service.
Which three device attestation mechanisms can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Trusted Platform Module (TPM) 1.2
- B. Symmetric key
- C. Trusted Platform Module (TPM) 2.0
- D. X.509 certificates
- E. Device Identity Composition Engine (DICE)
Answer: B,C,D
Explanation:
The Device Provisioning Service supports the following forms of attestation:
X.509 certificates based on the standard X.509 certificate authentication flow.
Trusted Platform Module (TPM) based on a nonce challenge, using the TPM 2.0 standard for keys to present a signed Shared Access Signature (SAS) token.
This does not require a physical TPM on the device, but the service expects to attest using the endorsement key per the TPM spec.
Symmetric Key based on shared access signature (SAS) Security tokens, which include a hashed signature and an embedded expiration.
Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/concepts-service#attestation-mechanism
NEW QUESTION 57
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have devices that connect to an Azure IoT hub. Each device has a fixed GPS location that includes latitude and longitude.
You discover that a device entry in the identity registry of the IoT hub is missing the GPS location.
You need to configure the GPS location for the device entry. The solution must prevent the changes from being propagated to the physical device.
Solution: You add the desired properties to the device twin.
Does the solution meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Instead add tags to the device twin. Desired properties are synced, while tags are not.
Incorrect Answers:
A: Device Twins are used to synchronize state between an IoT solution's cloud service and its devices. Each device's twin exposes a set of desired properties and reported properties. The cloud service populates the desired properties with values it wishes to send to the device. When a device connects it requests and/or subscribes for its desired properties and acts on them.
Reference:
https://docs.microsoft.com/de-de/azure/iot-hub/iot-hub-devguide-device-twins
https://azure.microsoft.com/sv-se/blog/deep-dive-into-azure-iot-hub-notifications-and-device-twin/
NEW QUESTION 58
You have an Azure IoT hub.
You need to check whether the IoT hub was affected by an outage.
What should you select in the Azure portal? To answer, select the appropriate option in the answer area.
NOTE: Each correct selection is worth one point.
- A. Metrics
- B. Alerts
- C. Resource health
- D. Diagnostic settings
Answer: C
NEW QUESTION 59
You have 100 devices that connect to an Azure IoT hub.
You plan to use Azure functions to process all the telemetry messages from the devices before storing the messages.
You need to configure the functions binding for the IoT hub.
Which two configuration details should you use to configure the binding? Each Answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. the Azure Event-Hub compatible name
- B. the IoT hub's connection string shared access key that has Service connect permissions
- C. the name of the resource group that contains the IoT hub
- D. the connection string of the Azure Event Hub-compatible endpoint from the IoT Hub built-in endpoints
Answer: A,D
Explanation:
EventHubName: Functions 2.x and higher. The name of the event hub. When the event hub name is also present in the connection string, that value overrides this property at runtime.
Connection: The name of an app setting that contains the connection string to the event hub's namespace. Copy this connection string by clicking the Connection Information button for the namespace, not the event hub itself. This connection string must have send permissions to send the message to the event stream.
Reference:
https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-event-iot-output
NEW QUESTION 60
You create a new IoT device named device1 on iothub1. Device1 has a primary key of Uihuih76hbHb.
How should you complete the device connection string? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: iothub1
The Azure IoT hub is named iothub1.
Box 2: azure-devices.net
The format of the device connection string looks like:
HostName={YourIoTHubName}.azure-devices.net;DeviceId=MyNodeDevice;SharedAccessKey={YourSharedAccessKey} Box 1: device1 Device1 has a primary key of Uihuih76hbHb.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/quickstart-control-device-dotnet
NEW QUESTION 61
You have an instance of Azure Time Series Insights and an Azure IoT hub that receives streaming telemetry from IoT devices.
You need to configure Time Series Insights to receive telemetry from the devices.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Create a dedicated consumer group..
2 - Add a new Time Series Insights event source.
3 - Configure the Time Series event source to connect to an existing IOT hub Reference:
https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-how-to-add-an-event-source-iothub
NEW QUESTION 62
You have an Azure IoT solution that includes an Azure IoT hub, a Device Provisioning Service instance, and 1,000 connected IoT devices. The IoT devices are allocated to tour enrollment groups. Each enrollment group is configured to use certificate attestation.
You need to decommission all the devices in a single enrollment group and the enrollment group itself.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Disable the enrollment group
2 - delete each device from the identity registry.
3 - Delete the enrollment group.
Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/how-to-unprovision-devices
NEW QUESTION 63
You have an Azure subscription that contains an Azure IoT hub, an Azure IoT Edge gateway, and 1,000 leaf devices. The leaf devices use a custom communication protocol that is NOT supported by the IoT hub.
You need to configure the gateway to meet the following requirements:
Minimize the number of connections between the gateway and the IoT hub.
Support addressing cloud-to-device messages to individual leaf devices.
How should you configure the gateway? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/iot-edge-as-gateway
NEW QUESTION 64
You need to configure Stream Analytics to meet the POV requirements.
What are two ways to achieve the goal? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Create an input in Stream Analytics that uses the built-in events endpoint of IoT Hub as the source.
- B. Route telemetry to an Azure Blob storage custom endpoint, and then configure the Blob storage as a reference input for Stream Analytics.
- C. Create a Stream Analytics module, and then deploy the module to all IoT Edge devices in the fleet.
- D. From IoT Hub, create a custom event hub endpoint, and then configure the endpoint as an input to Stream Analytics.
Answer: A,D
Explanation:
Explanation/Reference:
Process and manage data
Question Set 3
NEW QUESTION 65
You plan to deploy Azure Time Series Insights.
What should you create on iothub1 before you deploy Time Series Insights?
- A. a new consumer group
- B. a new message route
- C. an IP filter rule
- D. a new shared access policy
Answer: A
Explanation:
Create a dedicated consumer group in the IoT hub for the Time Series Insights environment to consume from.
Each Time Series Insights event source must have its own dedicated consumer group that isn't shared with any other consumer. If multiple readers consume events from the same consumer group, all readers are likely to exhibit failures.
Reference:
https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-how-to-add-an-event-source- iothub
NEW QUESTION 66
You are planning a proof of concept (POC) that will use an Azure IoT hub.
You have two self-signed client authentication certificates named Cert1 and Cert2. Cert1 has a basic constraint that contains Subject Type=C You need to identify which certificates to use.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/concepts-x509-attestation
NEW QUESTION 67
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure IoT solution that includes an Azure IoT hub, a Device Provisioning Service instance, and
1,000 connected IoT devices.
All the IoT devices are provisioned automatically by using one enrollment group.
You need to temporarily disable the IoT devices from the connecting to the IoT hub.
Solution: From the Device Provisioning Service, you disable the enrollment group, and you disable device entries in the identity registry of the IoT hub to which the IoT devices are provisioned.
Does the solution meet the goal?
- A. No
- B. Yes
Answer: B
Explanation:
You may find it necessary to deprovision devices that were previously auto-provisioned through the Device Provisioning Service.
In general, deprovisioning a device involves two steps:
1. Disenroll the device from your provisioning service, to prevent future auto-provisioning. Depending on whether you want to revoke access temporarily or permanently, you may want to either disable or delete an enrollment entry.
2. Deregister the device from your IoT Hub, to prevent future communications and data transfer. Again, you can temporarily disable or permanently delete the device's entry in the identity registry for the IoT Hub where it was provisioned.
Reference:
https://docs.microsoft.com/bs-latn-ba/azure/iot-dps/how-to-unprovision-devices
NEW QUESTION 68
You plan to deploy Azure Time Series Insights.
What should you create on iothub1 before you deploy Time Series Insights?
- A. a new consumer group
- B. a new message route
- C. an IP filter rule
- D. a new shared access policy
Answer: A
Explanation:
Create a dedicated consumer group in the IoT hub for the Time Series Insights environment to consume from. Each Time Series Insights event source must have its own dedicated consumer group that isn't shared with any other consumer. If multiple readers consume events from the same consumer group, all readers are likely to exhibit failures.
Reference:
https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-how-to-add-an-event-source- iothub
NEW QUESTION 69
......
How much AZ-220:Microsoft Azure IoT Developer Exam Cost
The price of the Microsoft Mobility and Devices Fundamentals exam is $165 USD, for more information related to exam price please visit to Microsoft Training website as prices of Microsoft exams fees get varied country wise.
Microsoft AZ-220 Official Cert Guide PDF: https://www.itpassleader.com/Microsoft/AZ-220-dumps-pass-exam.html
Exam AZ-220: Microsoft Azure IoT Developer - ITPassLeader: https://drive.google.com/open?id=1olxrUU8D7r2SZfEpPpOZxIdztvxUVRj5