Microsoft Microsoft Certifications AZ-220 Questions & Answers

• Question 101:

  You are deploying an Azure IoT Edge solution that includes multiple IoT Edge devices.

  You need to configure module-to-module routing.

  To which section of the deployment manifest should you add the routes?

  A. storeAndForwardConfiguration

  B. $edgeHub

  C. modules

  D. systemModules

  Correct Answer: B

  Routes are declared in the $edgeHub desired properties.

  Reference: https://docs.microsoft.com/en-us/azure/iot-edge/module-composition

• Question 102:

  You have an IoT device that has the following configurations:

  Hardware: Raspberry Pi

  Operating system: Raspbian

  You need to deploy Azure IoT Edge to the device.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Update the IoT Edge runtime.

  B. Install the IoT Edge security daemon.

  C. Run the Deploy-IoTEdge PowerShell cmdlet on the IoT Edge device.

  D. Install the container runtime.

  Correct Answer: AB

  The Azure IoT Edge runtime is what turns a device into an IoT Edge device. The runtime can be deployed on devices as small as a Raspberry Pi or as large as an industrial server.

  The IoT Edge security daemon provides and maintains security standards on the IoT Edge device. The daemon starts on every boot and bootstraps the device by starting the rest of the IoT Edge runtime.

  Reference:

  https://docs.microsoft.com/en-us/azure/iot-edge/how-to-install-iot-edge

• Question 103:

  You have 100 devices that connect to an Azure IoT hub.

  You plan to use Azure functions to process all the telemetry messages from the devices before storing the messages.

  You need to configure the functions binding for the IoT hub.

  Which two configuration details should you use to configure the binding? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. the name of the resource group that contains the IoT hub

  B. the IoT hub's connection string shared access key that has Service connect permissions

  C. the connection string of the Azure Event Hub-compatible endpoint from the IoT Hub built-in endpoints

  D. the Azure Event-Hub compatible name

  Correct Answer: CD

  EventHubName: Functions 2.x and higher. The name of the event hub. When the event hub name is also present in the connection string, that value overrides this property at runtime.

  Connection: The name of an app setting that contains the connection string to the event hub's namespace. Copy this connection string by clicking the Connection Information button for the namespace, not the event hub itself. This connection string must have send permissions to send the message to the event stream.

  Reference: https://docs.microsoft.com/en-us/azure/azure-functions/functions-bindings-event-iot-output

• Question 104:

  You have a Standard tier Azure IoT hub and a fleet of IoT devices.

  The devices connect to the IoT hub by using either Message Queuing Telemetry Transport (MQTT) or Advanced Message Queuing Protocol (AMQP).

  You need to send data to the IoT devices and each device must respond. Each device will require three minutes to process the data and respond.

  Solution: You use cloud-to-device messages and watch the cloud-to-device feedback endpoint for successful acknowledgement.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  IoT Hub provides three options for device apps to expose functionality to a back-end app:

  Twin's desired properties for long-running commands intended to put the device into a certain desired state. For example, set the telemetry send interval to 30 minutes.

  Direct methods for communications that require immediate confirmation of the result. Direct methods are often used for interactive control of devices such as turning on a fan.

  Cloud-to-device messages for one-way notifications to the device app.

  Reference:

  https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-c2d-guidance

• Question 105:

  You develop a custom Azure IoT Edge module named temperature-module.

  You publish temperature-module to a private container registry named mycr.azurecr.io

  You need to build a deployment manifest for the IoT Edge device that will run temperature-module.

  Which three container images should you define in the manifest? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. mcr.microsoft.com/azureiotedge-simulated-temperature-sensor:1.0

  B. mcr.microsoft.com/azureiotedge-agent:1.0

  C. mcr.microsoft.com/iotedgedev:2.0

  D. mycr.azurecr.io/temperature-module:latest

  E. mcr.microsoft.com/azureiotedge-hub:1.0

  Correct Answer: BDE

  Each IoT Edge device runs at least two modules: $edgeAgent and $edgeHub, which are part of the IoT Edge runtime. IoT Edge device can run multiple additional modules for any number of processes. Use a deployment manifest to tell your device which modules to install and how to configure them to work together.

  Reference: https://docs.microsoft.com/en-us/azure/iot-edge/module-composition

• Question 106:

  You have an Azure IoT solution that includes an Azure IoT Hub named Hub1 and an Azure IoT Edge device named Edge1. Edge1 connects to Hub1.

  You need to deploy a temperature module to Edge1.

  What should you do?

  A. From the Azure portal, navigate to Hub1 and select IoT Edge. Select Edge1, and then select Manage Child Devices. From a Bash prompt, run the following command: az iot edge set-modules -device-id Edge1 -hub-name Hub1 -content C:\deploymentMan1.json

  B. Create an IoT Edge deployment manifest that specifies the temperature module and the route to $upstream. From a Bash prompt, run the following command: az iot hub monitor-events-device-id Edge1 -hub-name Hub1

  C. From the Azure portal, navigate to Hub1 and select IoT Edge. Select Edge1, select Device Twin, and then set the deployment manifest as a desired property. From a Bash prompt, run the following command: az iot hub monitor-events-device-id Edge1 -hub-name Hub1

  D. Create an IoT Edge deployment manifest that specifies the temperature module and the route to $upstream. From a Bash prompt, run the following command: az iot edge set-modules -device-id Edge1 -hub-name Hub1 -content C:\deploymentMan1.json

  Correct Answer: D

  You deploy modules to your device by applying the deployment manifest that you configured with the module information.

  Change directories into the folder where your deployment manifest is saved. If you used one of the VS Code IoT Edge templates, use the deployment.json file in the config folder of your solution directory and not the deployment.template.json

  file.

  Use the following command to apply the configuration to an IoT Edge device:

  az iot edge set-modules --device-id [device id] --hub-name [hub name] -content [file path]

  Reference:

  https://docs.microsoft.com/en-us/azure/iot-edge/how-to-deploy-modules-cli

• Question 107:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Standard tier Azure IoT hub and a fleet of IoT devices.

  The devices connect to the IoT hub by using either Message Queuing Telemetry Transport (MQTT) or Advanced Message Queuing Protocol (AMQP).

  You need to send data to the IoT devices and each device must respond. Each device will require three minutes to process the data and respond.

  Solution: You use direct methods and check the response.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  IoT Hub provides three options for device apps to expose functionality to a back-end app:

  Twin's desired properties for long-running commands intended to put the device into a certain desired state. For example, set the telemetry send interval to 30 minutes.

  Direct methods for communications that require immediate confirmation of the result. Direct methods are often used for interactive control of devices such as turning on a fan.

  Cloud-to-device messages for one-way notifications to the device app.

  Reference:

  https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-c2d-guidance

• Question 108:

  Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while

  others might not have a correct solution.

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Standard tier Azure IoT hub and a fleet of IoT devices.

  The devices connect to the IoT hub by using either Message Queuing Telemetry Transport (MQTT) or Advanced Message Queuing Protocol (AMQP).

  You need to send data to the IoT devices and each device must respond. Each device will require three minutes to process the data and respond.

  Solution: You update the twin desired property and check the corresponding reported property.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  IoT Hub provides three options for device apps to expose functionality to a back-end app:

  Twin's desired properties for long-running commands intended to put the device into a certain desired state. For example, set the telemetry send interval to 30 minutes.

  Direct methods for communications that require immediate confirmation of the result. Direct methods are often used for interactive control of devices such as turning on a fan.

  Cloud-to-device messages for one-way notifications to the device app.

  Reference:

  https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-c2d-guidance

• Question 109:

  You have an Azure IoT hub that uses a Device Provision Service instance.

  You plan to deploy 100 IoT devices.

  You need to confirm the identity of the devices by using the Device Provision Service.

  Which three device attestation mechanisms can you use? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. X.509 certificates

  B. Trusted Platform Module (TPM) 2.0

  C. Trusted Platform Module (TPM) 1.2

  D. Symmetric key

  E. Device Identity Composition Engine (DICE)

  Correct Answer: ABD

  The Device Provisioning Service supports the following forms of attestation:

  X.509 certificates based on the standard X.509 certificate authentication flow.

  Trusted Platform Module (TPM) based on a nonce challenge, using the TPM 2.0 standard for keys to present a signed Shared Access Signature (SAS) token. This does not require a physical TPM on the device, but the service expects to

  attest using the endorsement key per the TPM spec.

  Symmetric Key based on shared access signature (SAS) Security tokens, which include a hashed signature and an embedded expiration.

  Reference:

  https://docs.microsoft.com/en-us/azure/iot-dps/concepts-service#attestation-mechanism

• Question 110:

  You are developing an Azure IoT Central application.

  You add a new custom device template to the application.

  You need to add a fixed location value to the device template. The value must be updated by the physical IoT device, read-only to device operators, and not graphed by IoT Central.

  What should you add to the device template?

  A. a Location property

  B. a Location telemetry

  C. a Cloud property

  Correct Answer: A

  For example, a builder can create a device template for a connected fan that has the following characteristics: Sends temperature telemetry Sends location property

  Reference: https://docs.microsoft.com/en-us/azure/iot-central/core/howto-set-up-template