Ace AZ-220 Certification with 205 Actual Questions
PASS Microsoft AZ-220 EXAM WITH UPDATED DUMPS
Microsoft AZ-220 certification exam is designed for professionals who want to validate their skills and knowledge in developing and implementing Azure IoT solutions. AZ-220 exam is targeted at developers who have experience working with Azure IoT services and technologies, and who are looking to demonstrate their expertise in this area. Microsoft Azure IoT Developer certification exam is designed to test the candidate's knowledge of Azure IoT services, Azure IoT Hub, Azure Event Grid, Azure Stream Analytics, Azure Time Series Insights, Azure IoT Central, and Azure IoT Edge.
Microsoft AZ-220 certification exam is a valuable asset to those seeking to enhance their career in IoT development. Microsoft Azure IoT Developer certification provides a comprehensive understanding of the Azure IoT services, enabling the development of high-quality IoT solutions. It also demonstrates the candidate's capability to design and implement secure and scalable IoT solutions using Azure services. Microsoft Azure IoT Developer certification is recognized globally and can lead to excellent career opportunities in IoT development.
The Microsoft Azure IoT Developer certification exam consists of multiple-choice questions that test the candidate's knowledge and skills in various areas of IoT development using Azure services. AZ-220 exam covers topics such as configuring and managing Azure IoT Hub, implementing Azure Stream Analytics for real-time data processing, developing solutions using Azure Functions, and implementing security and privacy controls for IoT solutions. Candidates who pass the exam will have demonstrated their ability to develop and implement secure, scalable, and reliable IoT solutions using Microsoft Azure.
NEW QUESTION # 24
You have an Azure IoT hub that uses a Device Provisioning Service instance.
You have 1,000 legacy IoT devices that only support MAC address or serial number identities. The device do NOT have a security feature that can be used to securely identify the device or a hardware security module (HSM).
You plan to deploy the devices to a secure environment.
You need to configure the Device Provisioning Service instance to ensure that all the devices are identified securely before they receive updates.
Which attestation mechanism should you choose?
- A. symmetric key attestation
- B. Trusted Platform Module (TPM) 1.2 attestation
- C. X.509 certificates
Answer: A
Explanation:
Explanation
A common problem with many legacy devices is that they often have an identity that is composed of a single piece of information. This identity information is usually a MAC address or a serial number. Legacy devices may not have a certificate, TPM, or any other security feature that can be used to securely identify the device.
The Device Provisioning Service for IoT hub includes symmetric key attestation. Symmetric key attestation can be used to identify a device based off information like the MAC address or a serial number.
Reference:
https://docs.microsoft.com/bs-latn-ba/azure/iot-dps/how-to-legacy-device-symm-key
NEW QUESTION # 25
You have an Azure IoT solution that contains an Azure IoT hub and 100 IoT devices. The devices run Windows Server 2016.
You need to deploy the Azure Defender for IoT C#-based security agent to the devices.
What should you do first?
- A. From the loT hub. create a security module for the devices.
- B. On the devices, set the PowerShell execution policy to Restricted.
- C. On the devices, initialize Trusted Platform Module (TPM).
- D. From the loT hub. create a system-assigned managed identity.
Answer: A
Explanation:
The IoT Edge security manager provides a safe framework for security service extensions through host-level modules. The IoT Edge security manager include Ensure safe operation of client agents for services including Device Update for IoT Hub and Azure Defender for IoT.
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/iot-edge-security-manager
NEW QUESTION # 26
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Stream Analytics job that receives input from an Azure IoT hub and sends the outputs to Azure Blob storage. The job has compatibility level 1.1 and six streaming units.
You have the following query for the job.
You plan to increase the streaming unit count to 12.
You need to optimize the job to take advantage of the additional streaming units and increase the throughput.
Solution: You change the query to the following.
Does this meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Explanation
Max number of Streaming Units with one step and with no partitions is 6.
Reference:
https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-parallelization
NEW QUESTION # 27
You have an Azure IoT solution that includes a standard tier Azure IoT hub and an IoT device.
The device sends one 100-KB device-to-cloud message every hour.
You need to calculate the total daily message consumption of the device. What is the total daily message consumption of the device?
- A. 0
- B. 4,800
- C. 2,400
- D. 1
Answer: A
Explanation:
100 KB * 24 is around 2,400 bytes.
The 100 KB message is divided into 4 KB blocks, and it is billed for 25 messages. 25 times 24 is 600 Note: The maximum message size for messages sent from a device to the cloud is 256 KB. These messages are metered in 4 KB blocks for the paid tiers so for instance if the device sends a 16 KB message via the paid tiers it will be billed as 4 messages.
Reference:
https://azure.microsoft.com/en-us/pricing/details/iot-hub/
NEW QUESTION # 28
You enable Azure Security Center for IoT.
You need to onboard a device to Azure Security Center.
What should you do?
- A. Add the azureiotsecurity module identity to the Azure IoT Hub device identity.
- B. Modify the connection string of the device.
- C. Install an X.509 certificate on the hardware security module (HSM) of the device.
- D. Open incoming TCP port 8883 on the device.
Answer: A
Explanation:
Use the following workflow to deploy and test your Azure Security Center for IoT security agents:
1. Enable Azure Security Center for IoT service to your IoT Hub
2. If your IoT Hub has no registered devices, Register a new device.
3. Create an azureiotsecurity security module for your devices.
Azure Security Center for IoT makes use of the module twin mechanism and maintains a security module twin named azureiotsecurity for each of your devices.
Note: To manually create a new azureiotsecurity module twin for a device use the following instructions:
1. In your IoT Hub, locate and select the device you wish to create a security module twin for.
2. Click on your device, and then on Add module identity.
3. In the Module Identity Name field, enter azureiotsecurity.
4. Click Save.
Reference:
https://docs.microsoft.com/en-us/azure/asc-for-iot/quickstart-create-security-twin
NEW QUESTION # 29
You create an Azure IoT hub by running the following command.
aziot hub create --resource-group MyResourceGroup --name MyIotHub --sku B1 -- location westus --partition-count 4 What does MylotHub support?
- A. Device Provisioning Service
- B. cloud-to-device messaging
- C. Azure IoT Edge
- D. device twins
Answer: A
Explanation:
The Device Provisioning Service is included in the Basic Tiers (such as B1).
Incorrect Answers:
B, C, D: The Standard tier is needed for cloud-to-device messaging, Azure IoT Edge, and device twins.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-scaling
NEW QUESTION # 30
You are writing code to provision IoT devices by using the Device Provisioning Service.
Which two details from the Overview blade of the Device Provisioning Service are required to provision a new IoT client device? To answer, select the appropriate detail in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/tutorial-set-up-device
NEW QUESTION # 31
You have an Azure IoT solution that includes several Azure IoT hubs.
A new alerting feature was recently added to the IoT devices. The feature uses a new device twin reported property named alertCondition.
You need to send alerts to an Azure Service Bus queue named MessageAlerts. The alerts must include alertCondition and the name of the IoT hub.
Which two actions should you perform? Each Answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Configure File upload for each IoT hub. Configure the device to send a file to an Azure Storage container that contains the device name and status message.
- B. Create an IoT Hub routing rule that has a data source of Device Telemetry Messages and select the endpoint for MessageAlerts.
- C. Add the following message enrichments:
Name = iotHubName
Value = $twin.tag.location
Endpoint = MessageAlert - D. Add the following message enrichments:
Name = iotHubName Value = $iothubname
Endpoint = MessageAlert - E. Create an IoT Hub routing rule that has a data source of Device Twin Change Events and select the endpoint for MessageAlerts.
Answer: C,D
Explanation:
Explanation
B: Message enrichments is the ability of the IoT Hub to stamp messages with additional information before the messages are sent to the designated endpoint. One reason to use message enrichments is to include data that can be used to simplify downstream processing. For example, enriching device telemetry messages with a device twin tag can reduce load on customers to make device twin API calls for this information.
D: Applying enrichments
The messages can come from any data source supported by IoT Hub message routing, including the following examples:
-->device twin change notifications -- changes in the device twin device telemetry, such as temperature or pressure device life-cycle events, such as when the device is created or deleted Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-message-enrichments-overview
NEW QUESTION # 32
You have an Azure IoT Central application.
You need to connect an IoT device to the application.
Which two settings do you require in IoT Central to configure the device? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Group SAS Primary Key
- B. Application Name
- C. Scope ID
- D. the IoT hub name
- E. Device ID
Answer: A,C
Explanation:
Required connection information:
* Group primary key: In your IoT Central application, navigate to Administration > Device Connection > SAS- IoT-Devices. Make a note of the shared access signature Primary key value.
* ID scope: In your IoT Central application, navigate to Administration > Device Connection. Make a note of the ID scope value.
Reference:
https://docs.microsoft.com/bs-cyrl-ba/azure/iot-central/core/tutorial-connect-device-python
NEW QUESTION # 33
You have an Azure IoT hub named Hub1 and a root certification authority (CA) named CA1. Hub1 is configured to use X.509 certificate device authentication.
You and a custom manufacturing partner complete a proof of possession flow.
You plan to deploy IoT devices manufactured by the custom manufacturing partner. Each device will have a certificate generated by an intermediate CA. The devices will authenticate by using device certificates signed by the partner.
You need to ensure that the custom devices can connect successfully to Hub1.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Graphical user interface, text, application, chat or text message Description automatically generated
Box 1: Sign the intermediate CA certificate by using the CA1 certificate.
X.509 certificates are typically arranged in a certificate chain of trust in which each certificate in the chain is signed by the private key of the next higher certificate, and so on, terminating in a self-signed root certificate.
This arrangement establishes a delegated chain of trust from the root certificate generated by a trusted root certificate authority (CA) down through each intermediate CA to the end-entity "leaf" certificate installed on a device.
Box 2: Sign the device certificate by using the intermediate CA
An intermediate certificate is an X.509 certificate, which has been signed by the root certificate (or by another intermediate certificate with the root certificate in its chain). The last intermediate certificate in a chain is used to sign the leaf certificate. An intermediate certificate can also be referred to as an intermediate CA certificate.
Box 3: Deploy the certificate chain to the device.
The leaf certificate, or end-entity certificate, identifies the certificate holder. It has the root certificate in its certificate chain as well as zero or more intermediate certificates. The leaf certificate is not used to sign any other certificates. It uniquely identifies the device to the provisioning service and is sometimes referred to as the device certificate. During authentication, the device uses the private key associated with this certificate to respond to a proof of possession challenge from the service.
Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/concepts-x509-attestation
NEW QUESTION # 34
You have 1,000 devices that connect to a standard tier Azure IoT hub.
All the devices are commissioned and send telemetry events to the built-in IoT Hub endpoint.
You configure message enrichment on the events endpoint and set the enrichment value to
$twin.tags.ipV4.
When you inspect messages on the events endpoint, you discover that all the messages are stamped with a string of "$twin.tags.ipV4".
What are two possible causes of the issue? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Message enrichment cannot be added to messages going to a built-in endpoint.
- B. The device sending the message has no device twin.
- C. The device twin path used for the value of the enrichment does not exist.
- D. The device twin property value used for message enrichment is set to "$twin.tags.ipV4".
- E. The ipV4tag is a restricted twin property that is unavailable for message enrichment.
- F. A standard tier IoT hub does not support device twin properties in message enrichments.
Answer: B,C
Explanation:
In some cases, if you are applying an enrichment with a value set to a tag or property in the device twin, the value will be stamped as a string value. For example, if an enrichment value is set to $twin.tags.field, the messages will be stamped with the string "$twin.tags.field" rather than the value of that field from the twin. This happens in the following cases:
* (C) Your IoT Hub is in the standard tier, but the device sending the message has no device twin.
* (E) Your IoT Hub is in the standard tier, but the device twin path used for the value of the enrichment does not exist. For example, if the enrichment value is set to $twin.tags.location, and the device twin does not have a location property under tags, the message is stamped with the string "$twin.tags.location".
* Your IoT Hub is in the basic tier. Basic tier IoT hubs do not support device twins.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-message-enrichments-overview
NEW QUESTION # 35
You have the devices shown in the following table.
You are implementing a proof of concept (POC) for an Azure IoT solution.
You need to deploy an Azure IoT Edge device as part of the POC.
On which two devices can you deploy IOT Edge? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Device4
- B. Device3
- C. Device2
- D. Device1
Answer: B,C
Explanation:
Azure IoT Edge runs great on devices as small as a Raspberry Pi3 to server grade hardware.
Tier 1.
The systems listed in the following table are supported by Microsoft, either generally available or in public preview, and are tested with each new release.
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/support
NEW QUESTION # 36
What should you do to identify the cause of the connectivity issues?
- A. Send cloud-to-device messages to the IoT devices.
- B. Monitor the connection status of the device twin by using an Azure function.
- C. Enable the collection of the Connections diagnostics logs and set up alerts for the connected devices count metric.
- D. Use the heartbeat pattern to send messages from the IoT devices to iothub1.
Answer: C
Explanation:
Scenario: You discover connectivity issues between the IoT gateway devices and iothub1, which cause IoT devices to lose connectivity and messages.
To log device connection events and errors, turn on diagnostics for IoT Hub. We recommend turning on these logs as early as possible, because if diagnostic logs aren't enabled, when device disconnects occur, you won't have any information to troubleshoot the problem with.
Step 1:
1. Sign in to the Azure portal.
2. Browse to your IoT hub.
3. Select Diagnostics settings.
4. Select Turn on diagnostics.
5. Enable Connections logs to be collected.
6. For easier analysis, turn on Send to Log Analytics (see pricing).
Step 2:
Set up alerts for device disconnect at scale
To get alerts when devices disconnect, configure alerts on the Connected devices (preview) metric.
Reference:
https://docs.microsoft.com/bs-cyrl-ba/azure/iot-hub/iot-hub-troubleshoot-connectivity Provision and manage devices Question Set 2
NEW QUESTION # 37
You need to install the Azure IoT Edge runtime on a new device that runs Windows 10 IoT Enterprise.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Step 1: From Azure IoT Hub, create an IoT Edge Device
Step 2: Deploy-IoTEdge
The Deploy-IoTEdge command checks that your Windows machine is on a supported version, turns on the containers feature, and then downloads the moby runtime and the IoT Edge runtime. The command defaults to using Windows containers.
{Invoke-WebRequest -useb https://aka.ms/iotedge-win} | Invoke-Expression; ` Deploy-IoTEdge Step 3: Initialize-IoTEdge The Initialize-IoTEdge command configures the IoT Edge runtime on your machine. The command defaults to manual provisioning with Windows containers.
{Invoke-WebRequest -useb https://aka.ms/iotedge
Step 4: Enter the IoT Edge device connection string.
When prompted, provide the device connection string that you retrieved in step 1. The device connection string associates the physical device with a device ID in IoT Hub.
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/module-composition
NEW QUESTION # 38
You have an Azure IoT hub that uses a Device Provision Service instance.
You plan to deploy 100 IoT devices.
You need to confirm the identity of the devices by using the Device Provision Service.
Which three device attestation mechanisms can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. X.509 certificates
- B. Trusted Platform Module (TPM) 2.0
- C. Symmetric key
- D. Device Identity Composition Engine (DICE)
- E. Trusted Platform Module (TPM) 1.2
Answer: A,B,C
Explanation:
The Device Provisioning Service supports the following forms of attestation:
* X.509 certificates based on the standard X.509 certificate authentication flow.
* Trusted Platform Module (TPM) based on a nonce challenge, using the TPM 2.0 standard for keys to present a signed Shared Access Signature (SAS) token. This does not require a physical TPM on the device, but the service expects to attest using the endorsement key per the TPM spec.
* Symmetric Key based on shared access signature (SAS) Security tokens, which include a hashed signature and an embedded expiration.
Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/concepts-service#attestation-mechanism
NEW QUESTION # 39
You have an Azure IoT hub.
You need to deploy a Device Provisioning Service instance that uses X.509 attestation to support new loT devices.
Which three actions should you perform in sequence in the Azure portal? To answer move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
NEW QUESTION # 40
You have an Azure Stream Analytics job named Asjob1 that uses the following query.
Asjob1 receives the events shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation
NEW QUESTION # 41
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a custom Azure IoT Edge module.
The module needs to identify the device ID of the local device.
Solution: You configure the module to read the device ID of the device twin.
Does this meet the goal?
- A. Yes
- B. No
Answer: A
Explanation:
Explanation
Device twins are JSON documents that store device state information including metadata, configurations, and conditions. Azure IoT Hub maintains a device twin for each device that you connect to IoT Hub.
Device identity properties. The root of the device twin JSON document contains the read-only properties from the corresponding device identity stored in the identity registry.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-device-twins
NEW QUESTION # 42
You need to install the Azure IoT Edge runtime on a new device that runs Windows 10 IoT Enterprise.
In which order should you perform the actions? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation
Step 1: From Azure IoT hub, create an IoT Edge device
In the Azure Cloud Shell, enter the following command to create a device named myEdgeDevice in your hub.
az iot hub device-identity create --device-id myEdgeDevice --edge-enabled --hub-name {hub_name} View the connection string for your device, which links your physical device with its identity in IoT Hub.
Copy the value of the connectionString key from the JSON output and save it. This value is the device connection string. You'll use this connection string to configure the IoT Edge runtime in the step 3.
Step 2: From an elevated PowerShell prompt, run the Deploy-IoTEdge cmdlet.
Install the Azure IoT Edge runtime on your IoT Edge device.
* Run PowerShell as an administrator.
* Run the Deploy-IoTEdge command, which performs the following tasks:
- Checks that your Windows machine is on a supported version.
- Turns on the containers feature.
- Downloads the moby engine and the IoT Edge runtime.
Step 3: From an elevated PowerShell prompt, run the Initialize-IoTEdge cmdlet Step 4: Enter the IoT Edge device connection string.
Configure the IoT Edge device with a device connection string.
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/quickstart
NEW QUESTION # 43
You have an Azure loT hub named hub1 and five IoT devices. The loT devices connect to hub1 and send data that is formatted by using a proprietary binary format. You need to convert the data to JSON before the data is sent to a downstream service. The solution must minimize administrative effort. What should you use?
- A. an Azure Service Bus trigger
- B. an Azure loT Central application
- C. an Azure function
- D. a message enrichment
Answer: A
NEW QUESTION # 44
You have an Azure subscription that contains an Azure loT hub named Hub1 and the IoT devices shown in the following table.
You have the automatic device configure rations shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 45
You need to install the Azure IoT Edge runtime on a new device that runs Windows 10 IoT Enterprise.
In which order should you perform the actions? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - From Azure IoT hub, create an IoT Edge device
2 - From an elevated PowerShell prompt, run the Deploy-IoTEdge cmdlet.
3 - From an elevated PowerShell prompt, run the Initialize-IoTEdge cmdlet
4 - Enter the IoT Edge device connection string.
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/quickstart
NEW QUESTION # 46
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have 20 IoT devices deployed across two floors of a building. The devices on the first floor must be set to 60 degrees. The devices on the second floor must be set to 80 degrees.
The device twins are configured to use a tag that identifies the floor on which the twins are located.
You create the following automatic configuration for the devices on the first floor.
You create the following automatic configuration for the devices on the second floor.
The IoT devices on the first floor report that the temperature is set to 80 degrees.
You need to ensure that the first-floor devices are set to the correct temperature.
Solution: In the automatic configuration for the second-floor devices, you set targetCondition to "tags.floor='second'".
Does this meet the goal?
- A. Yes
- B. No
Answer: A
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/module-deployment-monitoring?view=iotedge-2020-11
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-automatic-device-management-cli
NEW QUESTION # 47
......
AZ-220 Questions PDF [2024] Use Valid New dump to Clear Exam: https://learningtree.actualvce.com/Microsoft/AZ-220-valid-vce-dumps.html