Free AZ-220 Sample Questions — Microsoft Azure IoT Developer

You have 10,000 IoT devices that connect to an Azure IoT hub. The devices do not support over-the-air (OTA) updates. You need to decommission 1,000 devices. The solution must prevent connections and autoenrollment for the decommissioned devices. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. Update the connectionState device twin property on all the devices
• B. Blacklist the X.509 root certification authority (CA) certificate for the enrollment group
• C. Delete the enrollment entry for the devices
• D. Remove the identity certificate from the hardware security module (HSM) of the devices
• E. Delete the device identity from the device registry of the IoT hub

You have an IoT device that has the following configurations: ✑ Hardware: Raspberry Pi ✑ Operating system: Raspbian You need to deploy Azure IoT Edge to the device. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A. Update the IoT Edge runtime
• B. Install the IoT Edge security daemon
• C. Run the Deploy-IoTEdge PowerShell cmdlet on the IoT Edge device
• D. Install the container runtime

You have an Azure IoT Central solution that includes multiple IoT devices. The devices report temperature, humidity, and pressure. You need to export the sensor data captured during a 48-hour period as a CSV file. What should you use in IoT Central?

• A. Devices
• B. Jobs
• C. Device groups
• D. Analytics

You have an Azure subscription that contains an Azure IoT hub and two Azure IoT Edge devices named Device1 and Device2. You need to ensure that the IoT hub only accepts connections from Device1 and Device2. What should you configure?

• A. Azure Defender for IoT
• B. Azure Active Directory (Azure AD) External Identities
• C. Azure Active Directory (Azure AD) Identity Protection
• D. an IP filter

You need to store the real-time alerts generated by Stream Analytics to meet the technical requirements. Which type of Stream Analytics output should you configure?

• A. Azure Blob storage
• B. Microsoft Power BI
• C. Azure Cosmos DB
• D. Azure SQL Database

You have an Azure IoT solution. You need to implement multi-factor device authentication by using custom device authentication. What should you do first?

• A. Create an Azure Policy definition for Azure IoT Hub
• B. Enable multi-factor authentication (MFA) for Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra
• C. Create a service endpoint policy
• D. Deploy a security token service

You have ab Azure subscription that contains an Azure IoT hub named Hub1, 50 IoT devices, and an Azure Blob storage account named storage1. Hub1 will be used to route data from the IoT devices to storage1. You enable private endpoint access for Hub1. You need to ensure that Hub1 can route the data to storage1. What should you do?

• A. On Hub1, create a shared access policy
• B. On Hub1, add an X.509 certificate
• C. Deploy an Azure IoT Edge gateway device
• D. On Hub1, configure a system-assigned managed identity

You have an Azure subscription. You need to deploy an Azure IoT hub by using an Azure Resource Manager (ARM) template. The solution must ensure that the IoT hub rejects connections from devices that only support cipher suites that use SHA1. What should you include in the template?

• A. “authenticationType”:“keyBased”
• B. “disableDeviceSAS”:“true”
• C. “disableModuleSAS”:“true”
• D. “minTlsVersion”:“1.2”

You have an Azure IoT hub that has a hostname of contoso-hub.azure-devices.net and an MCU-based IoT device named Device1. Device1 does NOT support Azure IoT SDKs. You plan to connect Device1 to the IoT hub by using the Message Queuing Telemetry Transport (MQTT) protocol and to authenticate by using X.509 certificates. You need to ensure that Device1 can authenticate to the IoT hub. What should you do?

• A. Create an Azure key vault and enable the encryption of data at rest for the IoT hub by using a customer-managed key
• B. Enable a hardware security module (HSM) on Device1
• C. From the Azure portal, create an IoT Hub Device Provisioning Service (DPS) instance and add a certificate enrollment for Device1
• D. Add the DigiCert Baltimore Root Certificate to Device1

You have an Azure IoT solution that contains an Azure IoT hub. The IoT hub uses Microsoft Defender for IoT for device builders and an IoT device named ContosoDevice1. You need to implement the Defender for IoT micro agent. What should you configure in the IoT hub?

• A. a module twin
• B. a private endpoint
• C. an Azure IoT Edge module
• D. the device twin