Microsoft Microsoft Certifications AZ-220 Questions & Answers

• Question 41:

  You have an Azure IoT Edge module named SampleModule that runs on a device named Device1.

  You make changes to the code of SampleModule by using Microsoft Visual Studio Code.

  You need to push the code to the container registry and then deploy the module to Device1.

  Which two actions should you perform from Visual Studio Code? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Build and push the SampleModule code to the registry.

  B. Create a deployment for a single device.

  C. Upload to Azure Storage.

  D. Build an IoT Edge solution.

  E. Generate a shared access signature (SAS) token for Device1.

  Correct Answer: BD

  D: Once you create IoT Edge modules with your business logic, you want to deploy them to your devices to operate at the edge.

  B: Configure a deployment manifest. A deployment manifest is a JSON document that describes which modules to deploy, how data flows between the modules, and desired properties of the module twins. You deploy modules to your device by applying the deployment manifest that you configured with the module information.

  1.

  In the Visual Studio Code explorer view, expand the Azure IoT Hub section, and then expand the Devices node.

  2.

  To confirm that the device you've chosen is an IoT Edge device, select it to expand the list of modules and verify the presence of $edgeHub and $edgeAgent. Every IoT Edge device includes these two modules.

  3.

  Select Create Deployment for Single Device.

  4.

  Navigate to the deployment manifest JSON file that you want to use, and click Select Edge Deployment Manifest.

  Reference: https://docs.microsoft.com/en-us/azure/iot-edge/how-to-deploy-modules-vscode

• Question 42:

  You plan to develop modules for an Azure IoT Edge solution.

  You need to recommend a development tool that supports the following:

  1.

  Node.js

  2.

  Module templates

  3.

  Development on Linux workstations What should you recommend?

  A. the Azure IoT explorer

  B. Microsoft Visual Studio

  C. Microsoft Visual Studio Online

  D. Microsoft Visual Studio Code

  Correct Answer: C

  Use Visual Studio Code to develop Node.js code and deploy it to a device running Azure IoT Edge.

  You can use IoT Edge modules with Linux containers to deploy code that implements your business logic directly to your IoT Edge devices.

  Reference:

  https://docs.microsoft.com/en-us/azure/iot-edge/tutorial-node-module?view=iotedge-2020-11

• Question 43:

  You have an Azure subscription that contains an Azure IoT hub and two Azure IoT Edge devices named Device1 and Device2.

  You need to ensure that the IoT hub only accepts connections from Device1 and Device2.

  What should you configure?

  A. Azure API Management

  B. Azure Active Directory (Azure AD) Identity Protection

  C. Azure Defender for IoT

  D. an IP filter

  Correct Answer: B

  You can use Azure Active Directory (Azure AD) to authenticate requests to Azure IoT Hub service APIs, like create device identity and invoke direct method. You can also use Azure role-based access control (Azure RBAC) to authorize those same service APIs. By using these technologies together, you can grant permissions to access IoT Hub service APIs to an Azure AD security principal. This security principal could be a user, group, or application service principal.

  Note: There are three different ways for controlling access to IoT Hub:

  1.

  Azure Active Directory (Azure AD) integration for service APIs. Azure provides identity-based authentication with AAD and fine-grained authorization with Azure role-based access control (Azure RBAC). Azure AD and RBAC integration is supported for IoT hub service APIs only.

  2.

  Shared access signatures lets you group permissions and grant them to applications using access keys and signed security tokens.

  3.

  Per-device security credentials. Each IoT Hub contains an identity registry For each device in this identity registry, you can configure security credentials that grant DeviceConnect permissions scoped to the that device's endpoints.

  Reference: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-dev-guide-azure-ad-rbac

• Question 44:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have an Azure IoT solution that includes an Azure IoT hub and an Azure IoT Edge device.

  You plan to deploy 10 Bluetooth sensors. The sensors do not support MQTT, AMQP, or HTTPS.

  You need to ensure that all the sensors appear in the IoT hub as a single device.

  Solution: You configure the IoT Edge device as an IoT Edge identity translation gateway. You configure the sensors to connect to the device.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: A

  In the protocol translation gateway pattern, only the IoT Edge gateway has an identity with IoT Hub. The translation module receives messages from downstream devices, translates them into a supported protocol, and then the IoT Edge device sends the messages on behalf of the downstream devices. All information looks like it is coming from one device, the gateway.

  Reference: https://docs.microsoft.com/en-us/azure/iot-edge/iot-edge-as-gateway

• Question 45:

  After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

  You have a Standard tier Azure IoT hub and a fleet of IoT devices.

  The devices connect to the IoT hub by using either Message Queuing Telemetry Transport (MQTT) or Advanced Message Queuing Protocol (AMQP).

  You need to send data to the IoT devices and each device must respond. Each device will require three minutes to process the data and respond.

  Solution: You schedule an IoT Hub job to update the twin tags and you query for job progress.

  Does this meet the goal?

  A. Yes

  B. No

  Correct Answer: B

  Instead update the twin desired property and check the corresponding reported property.

  Note: IoT Hub provides three options for device apps to expose functionality to a back-end app:

  1.

  Twin's desired properties for long-running commands intended to put the device into a certain desired state. For example, set the telemetry send interval to 30 minutes.

  2.

  Direct methods for communications that require immediate confirmation of the result. Direct methods are often used for interactive control of devices such as turning on a fan.

  3.

  Cloud-to-device messages for one-way notifications to the device app.

  Reference: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-c2d-guidance

• Question 46:

  You have an Azure IoT solution that includes an Azure IoT hub and 100 Azure IoT Edge devices.

  You plan to deploy the IoT Edge devices to external networks. The firewalls of the external networks only allow traffic on port 80 and port 443.

  You need to ensure that the devices can connect to the IoT hub. The solution must minimize costs.

  What should you do?

  A. Configure the upstream protocol of the devices to use MQTT over TCP.

  B. Configure the upstream protocol of the devices to use AMQP over WebSocket.

  C. Connect the external networks to the IoT solution by using ExpressRoute.

  D. Integrate cellular communication hardware onto the devices and avoid the use of the external networks.

  Correct Answer: B

  AMQP over WebSockets uses port 443. Incorrect Answers:

  A: AMQP or MQTT are non HTTP protocols. MQTT uses port 8883, while AMQP uses 5671.

  C: Expressroute uses BGP. BGP uses TCP port 179.

  D: Would not minimize cost.

  Reference: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-protocols

• Question 47:

  You have an Azure IoT solution.

  You need to create a digital twin model.

  Which language should you use?

  A. XHTML

  B. DTDL

  C. YAML

  D. XML

  Correct Answer: B

  Azure Digital Twins models are represented in the JSON-LD-based Digital Twin Definition Language (DTDL).

  Reference: https://docs.microsoft.com/en-us/azure/digital-twins/concepts-models

• Question 48:

  You need to route events in Azure Digital Twins to a downstream service for additional processing. Which type of output endpoint can you use?

  A. Azure Event Hubs

  B. Azure Queue storage

  C. Microsoft Power BI

  D. Azure Table storage

  Correct Answer: A

  Create an endpoint for Azure Digital Twins. These are the supported types of endpoints that you can create for your instance: Event Grid Event Hubs Service Bus

  Note: In Azure Digital Twins, you can route event notifications to downstream services or connected compute resources. This is done by first setting up endpoints that can receive the events. You can then create event routes that specify which events generated by Azure Digital Twins are delivered to which endpoints.

  Reference: https://docs.microsoft.com/en-us/azure/digital-twins/how-to-manage-routes

• Question 49:

  You have an Azure IoT hub that receives messages from an IoT device. The messages are serialized as Protobuf.

  You need the IoT hub to route the messages.

  What should you do first?

  A. From the Azure portal, add desired properties to the device twin.

  B. Configure the IoT device to add application properties to the messages.

  C. From the Azure portal, configure the IoT hub to add message enrichments.

  D. Configure the IoT device to add ASCII-encoded properties to the body of the messages.

  Correct Answer: A

  Device twins store device-related information that:

  Device and back ends can use to synchronize device conditions and configuration.

  The solution back end can use to query and target long-running operations.

  Desired properties. Used along with reported properties to synchronize device configuration or conditions. The solution back end can set desired properties, and the device app can read them. The device app can also receive notifications of

  changes in the desired properties.

  Incorrect Answers:

  C: Message enrichments describes the ability of Azure IoT Hub to stamp messages with additional information before the messages are sent to the designated endpoint. One reason to use message enrichments is to include data that can be used to simplify downstream processing

  Reference: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-device-twins

• Question 50:

  You have IoT devices that connect to an Azure IoT hub.

  From IoT Hub, you create an Event subscription to be notified when devices are registered to IoT Hub. You select webhook endpoint as a handler for the Event subscription.

  Which two types of Event Grid messages will be received by the webhook? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Microsoft.Devices.DeviceCreated

  B. Microsoft.Resources.ResourceWriteSuccess

  C. Microsoft.EventGrid.SubscriptionValidationEvent

  D. Microsoft.Devices.DeviceConnected

  Correct Answer: AC

  Microsoft.Devices.DeviceCreated: Published when a device is registered to an IoT hub.

  The first thing you want to do is handle Microsoft.EventGrid.SubscriptionValidationEvent events. Every time someone subscribes to an event, Event Grid sends a validation event to the endpoint with a validationCode in the data payload.

  Reference: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-event-grid https://docs.microsoft.com/en-us/azure/event-grid/receive-events