Microsoft Microsoft Certifications AZ-220 Questions & Answers

• Question 81:

  You have an Azure IoT solution that includes an Azure IoT hub, 100 Azure IoT Edge devices, and 500 leaf devices.

  You need to perform a key rotation across the devices.

  Which three types of entities should you update? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. the $edgeHub module identity

  B. the $edgeAgent module identity

  C. the leaf module identities

  D. the IoT Edge device identities

  E. the iothubowner policy credentials

  F. the leaf device identities

  Correct Answer: ADF

  To get authorization to connect to IoT Hub, devices and services must send security tokens signed with either a shared access or symmetric key. These keys are stored with a device identity in the identity registry.

  An IoT Hub identity registry can be accessed like a dictionary, by using the deviceId or moduleId as the key.

  Reference:

  https://docs.microsoft.com/bs-latn-ba/azure/iot-dps/how-to-control-access

  https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-identity-registry

• Question 82:

  You have an Azure IoT Edge device.

  You need to modify the credentials used to access the container registry.

  What should you modify?

  A. the $edgeHub module twin

  B. the IoT Edge module

  C. the $edgeAgent module twin

  D. the Azure IoT Hub device twin

  Correct Answer: C

  The module twin for the IoT Edge agent is called $edgeAgent and coordinates the communications between the IoT Edge agent running on a device and IoT Hub. The desired properties are set when applying a deployment manifest on a specific device as part of a single-device or at-scale deployment.

  These properties include: runtime.settings.registryCredentials.{registryId}.username runtime.settings.registryCredentials.registryId}.password

  Reference: https://docs.microsoft.com/en-us/azure/iot-edge/module-edgeagent-edgehub

• Question 83:

  You enable Azure Security Center for IoT.

  You need to onboard a device to Azure Security Center.

  What should you do?

  A. Add the azureiotsecurity module identity to the Azure IoT Hub device identity.

  B. Open incoming TCP port 8883 on the device.

  C. Modify the connection string of the device.

  D. Install an X.509 certificate on the hardware security module (HSM) of the device.

  Correct Answer: A

  Use the following workflow to deploy and test your Azure Security Center for IoT security agents:

  1.

  Enable Azure Security Center for IoT service to your IoT Hub

  2.

  If your IoT Hub has no registered devices, Register a new device.

  3.

  Create an azureiotsecurity security module for your devices.

  Azure Security Center for IoT makes use of the module twin mechanism and maintains a security module twin named azureiotsecurity for each of your devices.

  Note: To manually create a new azureiotsecurity module twin for a device use the following instructions:

  1.

  In your IoT Hub, locate and select the device you wish to create a security module twin for.

  2.

  Click on your device, and then on Add module identity.

  3.

  In the Module Identity Name field, enter azureiotsecurity.

  4.

  Click Save.

  Reference: https://docs.microsoft.com/en-us/azure/asc-for-iot/quickstart-create-security-twin

• Question 84:

  You have an Azure IoT Central application that monitors 100 IoT devices.

  You need to generate alerts when the temperature of a device exceeds 100 degrees. The solution must meet the following requirements:

  1.

  Minimize costs

  2.

  Minimize deployment time What should you do?

  A. Perform a data export to Azure Service Bus.

  B. Create an email property in the device templates.

  C. Perform a data export to Azure Blob storage and create an Azure function.

  D. Create a rule that uses an email action.

  Correct Answer: D

  You can create rules in IoT Central that trigger actions, such as sending an email, in response to telemetry-based conditions, such as device temperature exceeding a threshold.

  Reference: https://docs.microsoft.com/en-us/azure/iot-central/core/howto-configure-rules-advanced

• Question 85:

  You have 1,000 devices that connect to an Azure IoT hub.

  You discover that some of the devices fail to send data to the IoT hub.

  You need to ensure that you can use Azure Monitor to troubleshoot the device connectivity issues.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. From the Diagnostics settings of the IoT hub, select Archive to a storage account.

  B. Collect the DeviceTelemetry, Connections, and Routes logs.

  C. Collect all metrics.

  D. From the Diagnostics settings of the IoT hub, select Send to Log Analytic.

  E. Collect the JobsOperations, DeviceStreams, and FileUploadOperations logs.

  Correct Answer: BD

  The IoT Hub resource logs connections category emits operations and errors having to do with device connections. The following screenshot shows a diagnostic setting to route these logs to a Log Analytics workspace:

  

  Note: Azure Monitor: Route connection events to logs:

  IoT hub continuously emits resource logs for several categories of operations. To collect this log data, though, you need to create a diagnostic setting to route it to a destination where it can be analyzed or archived. One such destination is

  Azure Monitor Logs via a Log Analytics workspace, where you can analyze the data using Kusto queries.

  Reference:

  https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-troubleshoot-connectivity

• Question 86:

  You have an Azure IoT solution that includes an Azure IoT hub.

  You plan to deploy 10,000 IoT devices.

  You need to validate the performance of the IoT solution while 10,000 concurrently connected devices stream telemetry. The solution must minimize effort.

  What should you deploy?

  A. an Azure IoT Device Simulation from Azure IoT Solution Accelerator

  B. an Azure function, an IoT Hub device SDK, and a timer trigger

  C. Azure IoT Central application and a template for the retail industry

  D. an Azure IoT Edge gateway configured as a protocol translation gateway

  Correct Answer: A

  The IoT solution accelerators are complete, ready-to-deploy IoT solutions that implement common IoT scenarios. The scenarios include connected factory and device simulation.

  Use the Device Simulation solution accelerator to run simulated devices that generate realistic telemetry. You can use this solution accelerator to test the behavior of the other solution accelerators or to test your own custom IoT solutions.

  Reference:

  https://docs.microsoft.com/en-us/azure/iot-accelerators/about-iot-accelerators

• Question 87:

  You have an Azure IoT solution that includes a basic tier Azure IoT hub named Hub1 and a Raspberry Pi device named Device1. Device1 connects to Hub1.

  You back up Device1 and restore the backup to a new Raspberry Pi device.

  When you start the new Raspberry Pi device, you receive the following error message in the diagnostic logs of Hub1: "409002 LinkCreationConflict."

  You need to ensure that Device1 and the new Raspberry Pi device can run simultaneously without error.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. On the new Raspberry Pi device, modify the connection string.

  B. From Hub1, modify the device shared access policy.

  C. Upgrade Hub1 to the standard tier.

  D. From Hub1, create a new consumer group.

  E. From Hub1, create a new IoT device.

  Correct Answer: AE

  Note: Symptoms

  You see the error 409002 LinkCreationConflict in logs along with device disconnection or cloud-to-device message failure.

  Cause

  Generally, this error happens when IoT Hub detects a client has more than one connection. In fact, when a new connection request arrives for a device with an existing connection, IoT Hub closes the existing connection with this error.

  Reference:

  https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-troubleshoot-error-409002-linkcreationconflict#symptoms

  https://devblogs.microsoft.com/iotdev/understand-different-connection-strings-in-azure-iot-hub/

• Question 88:

  You have 1,000 devices that connect to an Azure IoT hub.

  You are performing a scheduled check of deployed IoT devices.

  You plan to run the following command from the Azure CLI prompt.

  az iot hub query --hub-name hub1 --query-command "SELECT * FROM devices WHERE connectionState = 'Disconnected'"

  What does the command return?

  A. the Device Disconnected events

  B. the device twins

  C. the Connections logs

  D. the device credentials

  Correct Answer: A

  The IoT Hub publishes the Microsoft.Devices.DeviceDisconnected event type, which is published when a device is disconnected from an IoT hub.

  Reference: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-event-grid#event-types

• Question 89:

  You have an Azure IoT solution that includes several Azure IoT hubs.

  A new alerting feature was recently added to the IoT devices. The feature uses a new device twin reported property named alertCondition.

  You need to send alerts to an Azure Service Bus queue named MessageAlerts. The alerts must include alertCondition and the name of the IoT hub.

  Which two actions should you perform? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Configure File upload for each IoT hub. Configure the device to send a file to an Azure Storage container that contains the device name and status message.

  B. Add the following message enrichments: Name = iotHubName Value = $twin.tag.location Endpoint = MessageAlerts

  C. Create an IoT Hub routing rule that has a data source of Device Twin Change Events and select the endpoint for MessageAlerts.

  D. Add the following message enrichments: Name = iotHubName Value = $iothubname Endpoint = MessageAlerts

  E. Create an IoT Hub routing rule that has a data source of Device Telemetry Messages and select the endpoint for MessageAlerts.

  Correct Answer: BD

  B: Message enrichments is the ability of the IoT Hub to stamp messages with additional information before the messages are sent to the designated endpoint. One reason to use message enrichments is to include data that can be used to simplify downstream processing. For example, enriching device telemetry messages with a device twin tag can reduce load on customers to make device twin API calls for this information.

  D: Applying enrichments The messages can come from any data source supported by IoT Hub message routing, including the following examples: -->device twin change notifications -- changes in the device twin device telemetry, such as temperature or pressure device life-cycle events, such as when the device is created or deleted

  Reference: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-message-enrichments-overview

• Question 90:

  You have 20 devices that connect to an Azure IoT hub. You open Azure Monitor as shown in the exhibit.

  

  You discover that telemetry is not being received from five IoT devices.

  You need to identify the names of the devices that are not generating telemetry and visualize the data.

  What should you do first?

  A. Add the Number of throttling errors metric and archive the logs to an Azure storage account.

  B. Configure diagnostics for Routes and stream the logs to Azure Event Hubs.

  C. Add the Telemetry messages sent metric and archive the logs to an Azure Storage account.

  D. Configure diagnostics for Connections and send the logs to Azure Log Analytics.

  Correct Answer: D

  To log device connection events and errors, turn on diagnostics for IoT Hub. We recommend turning on these logs as early as possible, because if diagnostic logs aren't enabled, when device disconnects occur, you won't have any information to troubleshoot the problem with.

  1.

  Sign in to the Azure portal.

  2.

  Browse to your IoT hub.

  3.

  Select Diagnostics settings.

  4.

  Select Turn on diagnostics.

  5.

  Enable Connections logs to be collected.

  6.

  For easier analysis, turn on Send to Log Analytics

  

  Reference: https://docs.microsoft.com/bs-cyrl-ba/azure/Iot-hub/iot-hub-troubleshoot-connectivity