📘 Free AZ-220 Sample Questions
DRAG DROP
You have an Azure IoT solution that includes an Azure IoT hub, a Device Provisioning Service instance, and 1,000 connected IoT devices. The IoT devices are allocated to tour enrollment groups. Each enrollment group is configured to use certificate attestation.
You need to decommission all the devices in a single enrollment group and the enrollment group itself.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
A
Correct Answer:
A.
Explanation:
To deprovision all of the devices that have been provisioned through an enrollment group:
? Disable the enrollment group to disallow its signing certificate.
? Use the list of provisioned devices for that enrollment group to disable or delete each device from the identity registry of its respective IoT hub.
? After disabling or deleting all devices from their respective IoT hubs, you can optionally delete the enrollment group. Be aware, though, that, if you delete the enrollment group and there is an enabled enrollment group for a signing certificate higher up in the certificate chain of one or more of the devices, those devices can re-enroll.
You need to store the real-time alerts generated by Stream Analytics to meet the technical requirements.
Which type of Stream Analytics output should you configure?
A
Azure Blob storage
B
Microsoft Power BI
C
Azure Cosmos DB
D
Azure SQL Database
Correct Answer:
A. Azure Blob storage
Explanation:
When you create a Time Series Insights Preview pay-as-you-go (PAYG) SKU environment, you create two Azure resources:
An Azure Storage general-purpose V1 blob account for cold data storage.
An Azure Time Series Insights Preview environment that can be configured for warm data storage.
Reference: https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-update-storage-ingress
You have an Azure subscription that contains a resource group named RG1.
You need to deploy the Device Provisioning Service. The solution must ensure that the Device Provisioning Service can accept new device enrollments.
You create a Device Provisioning Service instance.
Which two actions should you perform next? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A
From the Linked IoT hubs blade of the Device Provisioning Service, link an Azure IoT hub.
B
From the Azure portal, create a new Azure IoT hub.
C
From the Manage allocation policy blade of the Device Provisioning Service, configure an allocation policy.
D
From the Certificates blade of the Device Provisioning Service, upload an
E
509 certificate to the Device Provisioning Service.
Correct Answer:
D. From the Certificates blade of the Device Provisioning Service, upload an
Explanation:
A: The Device Provisioning Service can only provision devices to IoT hubs that have been linked to it.
C: Allocation policy. The service-level setting that determines how Device Provisioning Service assigns devices to an IoT hub. There are three supported allocation policies: Lowest latency: devices are provisioned to an IoT hub with the lowest latency to the device. Evenly weighted distribution
Static configuration via the enrollment list
Reference: https://docs.microsoft.com/bs-latn-ba/azure/iot-dps/concepts-service
HOTSPOT
You create an Azure Stream Analytics job that has the following query.
A
Correct Answer:
A.
Explanation:
Box 1: Yes
All time handling operations in Azure Stream Analytics are in UTC.
Box 2: No
Tumbling windows are a series of fixed-sized, non-overlapping and contiguous time intervals.
Box 3: Yes
You have an Azure IoT hub that has a hostname of contoso-hub.azure-devices.net and an MCU-based IoT device named Device1. Device1 does NOT support Azure IoT SDKs.
You plan to connect Device1 to the IoT hub by using the Message Queuing Telemetry Transport (MQTT) protocol and to authenticate by using X.509 certificates.
You need to ensure that Device1 can authenticate to the IoT hub.
What should you do?
A
Create an Azure key vault and enable the encryption of data at rest for the IoT hub by using a customermanaged key.
B
Enable a hardware security module (HSM) on Device1.
C
From the Azure portal, create an IoT Hub Device Provisioning Service (DPS) instance and add a certificate enrollment for Device1.
D
Add the DigiCert Baltimore Root Certificate to Device1.
Correct Answer:
D. Add the DigiCert Baltimore Root Certificate to Device1.
Explanation:
Box 1: "desired": {
To configure connection events as high priority and collect high priority events every 7 minutes, use the following configuration.
"desired": {
"ms_iotn:urn_azureiot_Security_SecurityAgentConfiguration": {
"highPriorityMessageFrequency": {
"value": "PT7M"
},
"eventPriorityConnectionCreate": {
"value": "High"
}
Box 2: "highPriorityMessageFrequency ": {
Box 3: "eventPriorityConnectionCreate": {
Reference: https://docs.microsoft.com/en-us/azure/defender-for-iot/how-to-agent-configuration
You have an Azure IoT solution.
You need to create a digital twin model.
Which language should you use?
A
XHTML
B
DTDL
C
YAML
D
XML
Correct Answer:
B. DTDL
Explanation:
Azure Digital Twins models are represented in the JSON-LD-based Digital Twin Definition Language (DTDL).
Reference: https://docs.microsoft.com/en-us/azure/digital-twins/concepts-models
You have an Azure subscription that contains the resources shown in the following table.
A
Yes
B
No
Correct Answer:
B. No
You have 10,000 IoT devices that connect to an Azure IoT hub. The devices do not support
over-the-air (OTA) updates.
You need to decommission 1,000 devices. The solution must prevent connections and autoenrollment for the decommissioned devices.
Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A
Update the connection State device twin property on all the devices.
B
Blacklist the
C
509 root certification authority (CA) certificate for the enrollment group.
D
Delete the enrollment entry for the devices.
E
Remove the identity certificate from the hardware security module (HSM) of the devices.
F
Delete the device identity from the device registry of the IoT hub.
Correct Answer:
B. Blacklist the
Explanation:
B: X.509 certificates are typically arranged in a certificate chain of trust. If a certificate at any stage in a chain becomes compromised, trust is broken. The certificate must be blacklisted to prevent Device Provisioning Service from provisioning devices downstream in any chain that contains that certificate.
C: Individual enrollments apply to a single device and can use either X.509 certificates or SAS tokens (in a real or virtual TPM) as the attestation mechanism. (Devices that use SAS tokens as their attestation mechanism can be provisioned only through an individual enrollment.) To blacklist a device that has an individual enrollment, you can either disable or delete its enrollment entry.
To blacklist a device that has an individual enrollment, you can either disable or delete its enrollment entry.
Reference: https://docs.microsoft.com/en-us/azure/iot-dps/how-to-revoke-device-access-portal
You have an Azure IoT solution that contains an Azure loT hub and Azure 10T Edge devices.
You need to configure the metrics- collector module on the devices to send metrics to the loT hub as device-to-cloud messages.
Which environment variable should you update?
A
AllowedMetrics
B
LogAnalyticsWorkspaceId
C
UploadTarget
D
MetricsEndpointsCSVc
Correct Answer:
C. UploadTarget
HOTSPOT
You have an Azure IoT solution that includes an Azure IoT hub and 50 IoT devices.
The device twins have the following structure.
A
Correct Answer:
A.
Questions: 1-10 out of 360
Continue Full Practice..
GET ALL 360 QUESTIONS