[Mar 24, 2024] Fully Updated Microsoft Certified: Azure IoT Developer Specialty (AZ-220) Certification Sample Questions
Latest Microsoft AZ-220 Real Exam Dumps PDF
NEW QUESTION # 74
You have an Azure IoT hub that is being taken from prototype to production.
You plan to connect IoT devices to the IoT hub. The devices have hardware security modules (HSMs).
You need to use the most secure authentication method between the devices and the IoT hub. Company policy prohibits the use of internally generated certificates.
Which authentication method should you use?
- A. an X.509 self-signed certificate
- B. a certificate thumbprint
- C. a symmetric key
- D. An X.509 certificate signed by a root certification authority (CA).
Answer: D
Explanation:
Purchase X.509 certificates from a root certificate authority (CA). This method is recommended for production environments.
The hardware security module, or HSM, is used for secure, hardware-based storage of device secrets, and is the most secure form of secret storage. Both X.509 certificates and SAS tokens can be stored in the HSM Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/concepts-security
NEW QUESTION # 75
You have an Azure IoT Edge automatic deployment named D1 that deploys a temperature module to five IoT Edge devices.
D1 has a deployment priority of 10 and the following module configuration.
You need to create a new layered deployment that will add a new twin property named ReportingMode. The new deployment must not overwrite the existing module configurations set by D1.
How should you configure the deployment? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/module-deployment-monitoring
NEW QUESTION # 76
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stream Analytics job that receives input from an Azure IoT hub and sends the outputs to Azure Blob storage. The job has compatibility level 1.1 and six streaming units.
You have the following query for the job.
You plan to increase the streaming unit count to 12.
You need to optimize the job to take advantage of the additional streaming units and increase the throughput.
Solution: You change the compatibility level of the job to 1.2.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Explanation
Max number of Streaming Units with one step and with no partitions is 6.
Reference:
https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-parallelization
NEW QUESTION # 77
You have 10 IoT devices that connect to an Azure IoT hub named Hub1.
From Azure Cloud Shell, you run az iot hub monitor-events --hub-name Hub1 and receive the following error message: "az iot hub: 'monitor-events' is not in the 'az iot hub' command group. See 'az iot hub
--help'."
You need to ensure that you can run the command successfully. What should you run first?
- A. az iot hub configuration list --hub-name Hub1
- B. az iot hub generate-sas-token --hub-name Hub1
- C. az extension add -name azure-cli-iot-ext
- D. az iot hub monitor-feedback --hub-name Hub1
Answer: C
Explanation:
Explanation
Execute az extension add --name azure-cli-iot-ext once and try again.
In order to read the telemetry from your hub by CLI, you have to enable IoT Extension with the following commands:
Add: az extension add --name azure-cli-iot-ext
Reference:
https://github.com/MicrosoftDocs/azure-docs/issues/20843
NEW QUESTION # 78
You have an Azure subscription that contains an Azure IoT hub and two IoT devices named Device1 and Device2.
You plan to deploy an Azure IoT Edge gateway device named Gateway1.
You need to ensure that all device-to-cloud messages and twin change notifications from Device1 and Device2 to the IoT hub are routed by using Gateway1.
What tasks should you perform to configure the devices? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/how-to-authenticate-downstream-device
NEW QUESTION # 79
From the Device Provisioning Service, you create an enrollment as shown in the exhibit.
You need to deploy a new IoT device.
What should you use as the device identity during attestation?
- A. the HMAC-SHA256 hash of the device's registration ID
- B. the endorsement key of the device's Trusted Platform Module (TPM)
- C. the random string of alphanumeric characters
- D. a self-signed X.509 certificate
Answer: A
Explanation:
Each device uses its derived device key with your unique registration ID to perform symmetric key attestation with the enrollment during provisioning. To generate the device key, use the key you copied from your DPS enrollment to compute an HMAC-SHA256 of the unique registration ID for the device and convert the result into Base64 format.
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/how-to-auto-provision-symmetric-keys
NEW QUESTION # 80
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have a Standard tier Azure IoT hub and a fleet of IoT devices.
The devices connect to the IoT hub by using either Message Queuing Telemetry Transport (MQTT) or Advanced Message Queuing Protocol (AMQP).
You need to send data to the IoT devices and each device must respond. Each device will require three minutes to process the data and respond.
Solution: You schedule an IoT Hub job to update the twin tags and you query for job progress.
Does this meet the goal?
- A. No
- B. yes
Answer: A
Explanation:
Explanation
Instead update the twin desired property and check the corresponding reported property.
Note: IoT Hub provides three options for device apps to expose functionality to a back-end app:
* Twin's desired properties for long-running commands intended to put the device into a certain desired state. For example, set the telemetry send interval to 30 minutes.
* Direct methods for communications that require immediate confirmation of the result. Direct methods are often used for interactive control of devices such as turning on a fan.
* Cloud-to-device messages for one-way notifications to the device app.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-c2d-guidance
NEW QUESTION # 81
You have an Azure IoT solution that includes an Azure IoT hub.
You receive a root certification authority (CA) certificate from the security department at your company.
You need to configure the IoT hub to use the root CA certificate.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Upload the root CA certificate to the IoT hub.
2 - Generate a verification code.
3 - Generate verification certificate.
4 - Upload the verification certificate.
Reference:
https://docs.microsoft.com/bs-latn-ba/azure/iot-hub/iot-hub-security-x509-get-started
NEW QUESTION # 82
You need to add Time Series Insights to the solution to meet the pilot requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Step 1: Provision Time Series Insights
Select Provision new IoT Hub to create a new IoT hub.
Step 2: Route telemetry from IoT Hub to a custom event.
Step 3: Add a data access policy to Time Series Insights for the dashboard web app Scenario: Requirements. Pilot Requirements During the pilot phase, devices will be deployed to 10 offices. Each office will have up to 1,000 devices.
During this phase, you will add Azure Time Series Insights in parallel to Stream Analytics to support real-time graphs and queries in a dashboard web app.
The pilot deployment must minimize operating costs.
Reference:
https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-update-create-environment
NEW QUESTION # 83
You have an Azure IoT hub that receives messages from an IoT device. The messages are serialized as Protobuf.
You need the IoT hub to route the messages.
What should you do first?
- A. Configure the loT device to add ASCII-encoded properties to the body of the messages.
- B. From the Azure portal, add desired properties to the device twin.
- C. From the Azure portal, configure the loT hub to add message enrichments.
- D. Configure the loT device to add application properties to the messages.
Answer: B
Explanation:
Device twins store device-related information that:
Device and back ends can use to synchronize device conditions and configuration.
The solution back end can use to query and target long-running operations.
Desired properties. Used along with reported properties to synchronize device configuration or conditions. The solution back end can set desired properties, and the device app can read them. The device app can also receive notifications of changes in the desired properties.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-device-twins
NEW QUESTION # 84
You have an Azure IoT Central application.
You add an IoT device named Oven1 to the application. Oven1 uses an IoT Central template for industrial ovens.
You need to send an email to the managers group at your company as soon as the oven temperature falls below
400 degrees.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Create a SendGrid account in the same resource group as the IoT Central application.
- B. Add a condition that has Aggregation set to Minimum.
- C. From IoT Central, create a telemetry rule for the template.
- D. Add the Manager role to the IoT Central application.
- E. Add a condition that has Time Aggregation set to Off.
Answer: C,E
Explanation:
Explanation
Devices use telemetry to send numerical data from the device. A rule triggers when the selected telemetry crosses a specified threshold.
E: To create a telemetry rule, the device template must include at least one telemetry value. The rule monitors the temperature reported by the device and sends an email when it falls below 400 degrees.
B: Configure the rule conditions.
Conditions define the criteria that the rule monitors. In this tutorial, you configure the rule to fire when the temperature exceeds 70° F.
1. Select Temperature in the Telemetry dropdown.
2. Next, choose Is less than as the Operator and enter 400 as the Value.
3. Optionally, you can set a Time aggregation. When you select a time aggregation, you must also select an aggregation type, such as average or sum from the aggregation drop-down.
* Without aggregation, the rule triggers for each telemetry data point that meets the condition.
* With aggregation, the rule triggers if the aggregate value of the telemetry data points in the time window meets the condition.
Reference:
https://docs.microsoft.com/en-us/azure/iot-central/core/tutorial-create-telemetry-rules
NEW QUESTION # 85
You have 10 IoT devices that connect to an Azure IoT hub named Hub1.
From Azure Cloud Shell, you run az iot hub monitor-events --hub-name Hub1and receive the following error message: "az iot hub: 'monitor-events' is not in the 'az iot hub' command group. See 'az iot hub
--help'."
You need to ensure that you can run the command successfully.
What should you run first?
- A. az iot hub configuration list --hub-name Hub1
- B. az iot hub generate-sas-token --hub-name Hub1
- C. az extension add -name azure-cli-iot-ext
- D. az iot hub monitor-feedback --hub-name Hub1
Answer: C
Explanation:
Execute az extension add --name azure-cli-iot-ext once and try again.
In order to read the telemetry from your hub by CLI, you have to enable IoT Extension with the following commands:
Add: az extension add --name azure-cli-iot-ext
Reference:
https://github.com/MicrosoftDocs/azure-docs/issues/20843
NEW QUESTION # 86
You have an Azure IoT hub that uses a Device Provision Service instance.
You plan to deploy 100 IoT devices.
You need to confirm the identity of the devices by using the Device Provision Service.
Which three device attestation mechanisms can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Trusted Platform Module (TPM) 1.2
- B. Trusted Platform Module (TPM) 2.0
- C. Symmetric key
- D. Device Identity Composition Engine (DICE)
- E. X.509 certificates
Answer: B,C,E
Explanation:
The Device Provisioning Service supports the following forms of attestation:
* X.509 certificates based on the standard X.509 certificate authentication flow.
* Trusted Platform Module (TPM) based on a nonce challenge, using the TPM 2.0 standard for keys to present a signed Shared Access Signature (SAS) token. This does not require a physical TPM on the device, but the service expects to attest using the endorsement key per the TPM spec.
* Symmetric Key based on shared access signature (SAS) Security tokens, which include a hashed signature and an embedded expiration.
Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/concepts-service#attestation-mechanism
NEW QUESTION # 87
You have an instance of Azure Time Series Insights and an Azure IoT hub that receives streaming telemetry from IoT devices.
You need to configure Time Series Insights to receive telemetry from the devices.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
Step 1: Create a dedicated consumer group..
Add a consumer group to your IoT hub.
Applications use consumer groups to pull data from Azure IoT Hub. To reliably read data from your IoT hub, provide a dedicated consumer group that's used only by this Time Series Insights environment.
Step 2: Add a new Time Series Insights event source.
Add a new event source
Sign in to the Azure portal.
In the left menu, select All resources. Select your Time Series Insights environment.
Under Settings, select Event Sources, and then select Add.
In the New event source pane, for Event source name, enter a name that's unique to this Time Series Insights environment. For example, enter event-stream.
Step 3: Configure the Time Series event source to connect to an existing IOT hub Step 4: For Source, select IoT Hub.
Step 5: Select a value for Import option:
If you already have an IoT hub in one of your subscriptions, select Use IoT Hub from available subscriptions. This option is the easiest approach.
Reference:
https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-how-to-add-an-event-source-iothub
NEW QUESTION # 88
You have 100 devices that connect to an Azure IoT hub.
You plan to use Azure functions to process all the telemetry messages from the devices before storing the messages.
You need to configure the functions binding for the IoT hub.
Which two configuration details should you use to configure the binding? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. the IoT hub's connection string shared access key that has Service connect permissions
- B. the connection string of the Azure Event Hub-compatible endpoint from the IoT Hub built-in endpoints
- C. the Azure Event-Hub compatible name
- D. the name of the resource group that contains the IoT hub
Answer: B,C
Explanation:
EventHubName: Functions 2.x and higher. The name of the event hub. When the event hub name is also present in the connection string, that value overrides this property at runtime.
Connection: The name of an app setting that contains the connection string to the event hub's namespace.
Copy this connection string by clicking the Connection Information button for the namespace, not the event hub itself. This connection string must have send permissions to send the message to the event stream.
Reference:
https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-event-iot-output
NEW QUESTION # 89
You have an Azure IoT hub that uses a Device Provisioning Service instance.
You create a new individual device enrollment that uses symmetric key attestation.
Which detail from the enrollment is required to auto provision the device by using the Device Provisioning Service?
- A. the hostname of the IoT hub
- B. the registration ID of the enrollment
- C. the primary key of the enrollment
- D. the device identity of the IoT hub
Answer: D
NEW QUESTION # 90
You need to install the Azure IoT Edge runtime on a new device that runs Windows 10 IoT Enterprise.
In which order should you perform the actions? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Step 1: From Azure IoT hub, create an IoT Edge device
In the Azure Cloud Shell, enter the following command to create a device named myEdgeDevice in your hub.
az iot hub device-identity create --device-id myEdgeDevice --edge-enabled --hub-name {hub_name} View the connection string for your device, which links your physical device with its identity in IoT Hub.
Copy the value of the connectionString key from the JSON output and save it. This value is the device connection string. You'll use this connection string to configure the IoT Edge runtime in the step 3.
Step 2: From an elevated PowerShell prompt, run the Deploy-IoTEdge cmdlet.
Install the Azure IoT Edge runtime on your IoT Edge device.
* Run PowerShell as an administrator.
* Run the Deploy-IoTEdge command, which performs the following tasks:
- Checks that your Windows machine is on a supported version.
- Turns on the containers feature.
- Downloads the moby engine and the IoT Edge runtime.
Step 3: From an elevated PowerShell prompt, run the Initialize-IoTEdge cmdlet Step 4: Enter the IoT Edge device connection string.
Configure the IoT Edge device with a device connection string.
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/quickstart
NEW QUESTION # 91
You are troubleshooting device connections to and disconnections from an Azure IoT hub.
You configure diagnostic logging for the IoT hub to send to Log Analytics.
You need to generate a report that displays the device connection and disconnection events.
How should you complete the query? To answer, drag the appropriate values to the correct targets. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/monitor-iot-hub
NEW QUESTION # 92
You need to recommend the format of telemetry messages to meet the POV requirements.
What should you recommend?
- A. JSON
- B. XML
- C. Avro
Answer: A
Explanation:
Scenario: POV Requirements
Ensure that all message content during this phase is human readable to simplify debugging.
Avro uses a binary format, so it is not human readable.
The more lightweight JSON (Javascript object notation) has become a popular alternative to XML for various reasons. A couple obvious ones are:
Less verbose- XML uses more words than necessary
JSON is faster- Parsing XML software is slow and cumbersome.
Reference:
https://blog.cloud-elements.com/json-better-xml
NEW QUESTION # 93
You need to add Time Series Insights to the solution to meet the pilot requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
Step 1: Provision Time Series Insights
Select Provision new IoT Hub to create a new IoT hub.
Step 2: Route telemetry from IoT Hub to a custom event.
Step 3: Add a data access policy to Time Series Insights for the dashboard web app Scenario: Requirements. Pilot Requirements During the pilot phase, devices will be deployed to 10 offices. Each office will have up to 1,000 devices.
During this phase, you will add Azure Time Series Insights in parallel to Stream Analytics to support real-time graphs and queries in a dashboard web app.
The pilot deployment must minimize operating costs.
Incorrect Answers:
No need to use an endpoint.
Reference:
https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-update-create-environment
NEW QUESTION # 94
You are developing an Azure IoT Central application.
You add a new custom device template to the application.
You need to add a fixed location value to the device template. The value must be updated by the physical IoT device, read-only to device operators, and not graphed by IoT Central.
What should you add to the device template?
- A. a Cloud property
- B. a Location property
- C. a Location telemetry
Answer: B
Explanation:
For example, a builder can create a device template for a connected fan that has the following characteristics:
Sends temperature telemetry
Sends location property
Reference:
https://docs.microsoft.com/en-us/azure/iot-central/core/howto-set-up-template
NEW QUESTION # 95
You develop a custom Azure IoT Edge module named temperature-module.
You publish temperature-module to a private container registry named mycr.azurecr.io You need to build a deployment manifest for the IoT Edge device that will run temperature-module.
Which three container images should you define in the manifest? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
mcr.microsoft.com/azureiotedge-simulated-temperature-sensor:1.0
- A. mcr.microsoft.com/iotedgedev:2.0
- B. mcr.microsoft.com/azureiotedge-hub:1.0
- C. mycr.azurecr.io/temperature-module:latest
- D. mcr.microsoft.com/azureiotedge-agent:1.0
Answer: A,B,C
Explanation:
Each IoT Edge device runs at least two modules: $edgeAgent and $edgeHub, which are part of the IoT Edge runtime. IoT Edge device can run multiple additional modules for any number of processes. Use a deployment manifest to tell your device which modules to install and how to configure them to work together.
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/module-composition
NEW QUESTION # 96
......
Microsoft AZ-220 Dumps - Secret To Pass in First Attempt: https://www.actualtests4sure.com/AZ-220-test-questions.html
AZ-220 Practice Test Questions Updated 205 Questions: https://drive.google.com/open?id=11_Fa9i7edMTxRFEKYgpzVnqof_Y0w-El
