AZ-220 V1

You have an Azure IoT solution that includes an Azure IoT hub and 100 Azure IoT Edge devices.

You plan to deploy the IoT Edge devices to external networks. The firewalls of the external networks only allow traffic on port 80 and port 443.

You need to ensure that the devices can connect to the IoT hub. The solution must minimize costs.

What should you do?
A . Configure the devices for extended offline operations.
B. Configure the upstream protocol of the devices to use MQTT over WebSocket.
C. Connect the external networks to the IoT solution by using ExpressRoute.
D. Configure the devices to use an HTTPS proxy.

View Answer

Answer: B

Explanation:

MQTT over WebSockets uses port 443.

Reference: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-protocols

How should you complete the GROUP BY clause to meet the Streaming Analytics requirements?
A . GROUP BY HoppingWindow(Second, 60, 30)
B. GROUP BY TumblingWindow(Second, 30)
C. GROUP BY SlidingWindow(Second, 30)
D. GROUP BY SessionWindow(Second, 30, 60)

View Answer

Answer: B

Explanation:

Scenario: You plan to use a 30-second period to calculate the average temperature reading of the sensors.

Tumbling window functions are used to segment a data stream into distinct time segments and perform a function against them, such as the example below. The key differentiators of a Tumbling window are that they repeat, do not overlap, and an event cannot belong to more than one tumbling window.

InAnswers:

A: Hopping window functions hop forward in time by a fixed period. It may be easy to think of them as Tumbling windows that can overlap, so events can belong to more than one Hopping window result set.

Reference: https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-window-functions

You have an Azure IoT Central application.

You add an IoT device named Oven1 to the application. Oven1 uses an IoT Central template for industrial ovens.

You need to send an email to the managers group at your company as soon as the oven temperature falls below 400 degrees.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A . Create a SendGrid account in the same resource group as the IoT Central application.
B. Add a condition that has Time Aggregation set to Off.
C. Add a condition that has Aggregation set to Minimum.
D. Add the Manager role to the IoT Central application.
E. From IoT Central, create a telemetry rule for the template.

View Answer

Answer: B,E

Explanation:

Devices use telemetry to send numerical data from the device. A rule triggers when the selected telemetry crosses a specified threshold.

E: To create a telemetry rule, the device template must include at least one telemetry value. The rule monitors the temperature reported by the device and sends an email when it falls below 400 degrees.

B: Configure the rule conditions.

Conditions define the criteria that the rule monitors. In this tutorial, you configure the rule to fire when the temperature exceeds 70° F.

You have an Azure IoT Edge module named SampleModule that runs on a device named Device1.

You make changes to the code of SampleModule by using Microsoft Visual Studio Code.

You need to push the code to the container registry and then deploy the module to Device1.

Which two actions should you perform from Visual Studio Code? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A . Build and push the SampleModule code to the registry.
B. Create a deployment for a single device.
C. Generate a deployment manifest.
D. Build an loT Edge solution.
E. Generate a shared access signature (SAS) token for Device 1.

View Answer

Answer: B,C

Explanation:

C: Configure a deployment manifest. A deployment manifest is a JSON document that describes which modules to deploy, how data flows between the modules, and desired properties of the module twins.

B: You deploy modules to your device by applying the deployment manifest that you configured with the module information.

Reference: https://docs.microsoft.com/en-us/azure/iot-edge/how-to-deploy-modules-vscode

You have an Azure IoT solution that contains an Azure IoT hub and 100 IoT devices. The devices run Windows Server 2016.

You need to deploy the Azure Defender for IoT C#-based security agent to the devices.

What should you do first?
A . On the devices, initialize Trusted Platform Module (TPM).
B. From the loT hub. create a system-assigned managed identity.
C. From the loT hub. create a security module for the devices.
D. On the devices, set the PowerShell execution policy to Restricted.

View Answer

Answer: C

Explanation:

The IoT Edge security manager provides a safe framework for security service extensions through host-level modules.

The IoT Edge security manager include

✑ Ensure safe operation of client agents for services including Device Update for IoT Hub and Azure Defender for IoT.

Reference: https://docs.microsoft.com/en-us/azure/iot-edge/iot-edge-security-manager

You have 10 devices that connect to an Azure loT hub. Each device has a unique public IP address. The devices are not provisioned through DPS.

You discover an anomaly in messages from two devices.

You need to stop all messages from both devices without affecting the other devices.

Solution: You add IP filter rules for the devices.

Does this meet the goal?
A . Yes
B. No

View Answer

Answer: A

You have an existing Azure IoT hub.

You need to connect physical IoT devices to the IoT hub.

You are connecting the devices through a firewall that allows only port 443 and port 80.

Which three communication protocols can you use? Each correct answer presents a

complete solution. NOTE: Each correct selection is worth one point.
A . MQTT over WebSocket
B. AMQP
C. AMQP over WebSocket
D. MQTT
E. HTTPS

View Answer

Answer: A,C,E

Explanation:

MQTT over WebSockets, AMQP over WebSocket, and HTTPS use port 443.

Reference: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-protocols

You have an Azure IoT hub that is being taken from prototype to production.

You plan to connect IoT devices to the IoT hub. The devices have hardware security modules (HSMs). You need to use the most secure authentication method between the devices and the IoT hub. Company

policy prohibits the use of internally generated certificates.

Which authentication method should you use?
A . an X.509 self-signed certificate
B. a certificate thumbprint
C. a symmetric key
D. An X.509 certificate signed by a root certification authority (CA).

View Answer

Answer: D

Explanation:

Purchase X.509 certificates from a root certificate authority (CA). This method is recommended for production environments.

The hardware security module, or HSM, is used for secure, hardware-based storage of device secrets, and is the most secure form of secret storage. Both X.509 certificates and SAS tokens can be stored in the HSM

Reference: https://docs.microsoft.com/en-us/azure/iot-dps/concepts-security

HOTSPOT

You have the following device twin for the IoT device.

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

View Answer

Answer:

Explanation:

Box1: Yes

Box 2: Yes

Fanspeed 73 is a reported property.

Box 3: No

The deviceID property is read only.

You have an Azure IoT Edge module named SampleModule that runs on a device named Device1.

You make changes to the code of SampleModule by using Microsoft Visual Studio Code.

You need to push the code to the container registry and then deploy the module to Device1.

Which two actions should you perform from Visual Studio Code? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A . Build and push the SampleModule code to the registry.
B. Create a deployment for a single device.
C. Upload to Azure Storage.
D. Build an loT Edge solution.
E. Generate a shared access signature (SAS) token for Device 1.

View Answer

Answer: B,D

Explanation:

D: Once you create IoT Edge modules with your business logic, you want to deploy them to your devices to operate at the edge.

B: Configure a deployment manifest. A deployment manifest is a JSON document that describes which modules to deploy, how data flows between the modules, and desired properties of the module twins.

You deploy modules to your device by applying the deployment manifest that you configured with the module information.

✑ In the Visual Studio Code explorer view, expand the Azure IoT Hub section, and then expand the Devices node.

✑ To confirm that the device you’ve chosen is an IoT Edge device, select it to expand the list of modules and verify the presence of $edgeHub and $edgeAgent. Every IoT Edge device includes these two modules.

✑ Select Create Deployment for Single Device.

✑ Navigate to the deployment manifest JSON file that you want to use, and click Select Edge Deployment Manifest.

Reference: https://docs.microsoft.com/en-us/azure/iot-edge/how-to-deploy-modules-vscode