[Dec-2021] Verified Microsoft Exam Dumps with AZ-220 Exam Study Guide
Best Quality Microsoft AZ-220 Exam Questions Exams4sures Realistic Practice Exams [2021]
How to book the AZ-220:Microsoft Azure IoT Developer Exam
These are following steps for registering the AZ-220:Microsoft Azure IoT Developer exam.
- Step 1: Visit to Microsoft Learning and search for AZ-220:Microsoft Azure IoT Developer.
- Step 2: Sign up/Login to Pearson VUE account
- Step 3: Select local centre based on your country, date, time and confirm with a payment method.
Skills measured
- Provision and manage devices (15-20%)
- The content of this exam was updated on July 26, 2021. Please download the exam skills outline below to see what changed.
- Implement IoT Edge (15-20%)
- Process and manage data (15-20%)
- Set up the IoT solution infrastructure (10-15%)
- Implement security (10-15%)
- Implement business integration (5-10%)
- Monitor, troubleshoot, and optimize IoT solutions (15-20%)
NEW QUESTION 13
You need to enable telemetry message tracing through the entire IoT solution.
What should you do?
- A. Monitor device lifecycle events.
- B. Implement distributed tracing.
- C. Upload IoT device logs by using the File upload feature.
- D. Enable the DeviceTelemetry diagnostic log and stream the log data to an Azure event hub.
Answer: B
Explanation:
IoT Hub is one of the first Azure services to support distributed tracing. As more Azure services support distributed tracing, you'll be able trace IoT messages throughout the Azure services involved in your solution.
Note:
Enabling distributed tracing for IoT Hub gives you the ability to:
* Precisely monitor the flow of each message through IoT Hub using trace context. This trace context includes correlation IDs that allow you to correlate events from one component with events from another component. It can be applied for a subset or all IoT device messages using device twin.
* Automatically log the trace context to Azure Monitor diagnostic logs.
* Measure and understand message flow and latency from devices to IoT Hub and routing endpoints.
Start considering how you want to implement distributed tracing for the non-Azure services in your IoT solution.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-distributed-tracing Monitor, troubleshoot, and optimize IoT solutions Question Set 2
NEW QUESTION 14
From the Device Provisioning Service, you create an enrollment as shown in the exhibit.
You need to deploy a new IoT device.
What should you use as the device identity during attestation?
- A. a self-signed X.509 certificate
- B. the random string of alphanumeric characters
- C. the HMAC-SHA256 hash of the device's registration ID
- D. the endorsement key of the device's Trusted Platform Module (TPM)
Answer: C
Explanation:
Each device uses its derived device key with your unique registration ID to perform symmetric key attestation with the enrollment during provisioning. To generate the device key, use the key you copied from your DPS enrollment to compute an HMAC-SHA256 of the unique registration ID for the device and convert the result into Base64 format.
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/how-to-auto-provision-symmetric-keys
NEW QUESTION 15
You have an Azure IoT solution that includes several Azure IoT hubs.
A new alerting feature was recently added to the IoT devices. The feature uses a new device twin reported property named alertCondition.
You need to send alerts to an Azure Service Bus queue named MessageAlerts. The alerts must include alertCondition and the name of the IoT hub.
Which two actions should you perform? Each Answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Add the following message enrichments:
Name = iotHubName
Value = $twin.tag.location
Endpoint = MessageAlert - B. Configure File upload for each IoT hub. Configure the device to send a file to an Azure Storage container that contains the device name and status message.
- C. Create an IoT Hub routing rule that has a data source of Device Telemetry Messages and select the endpoint for MessageAlerts.
- D. Create an IoT Hub routing rule that has a data source of Device Twin Change Events and select the endpoint for MessageAlerts.
- E. Add the following message enrichments:
Name = iotHubName Value = $iothubname
Endpoint = MessageAlert
Answer: A,E
Explanation:
B: Message enrichments is the ability of the IoT Hub to stamp messages with additional information before the messages are sent to the designated endpoint. One reason to use message enrichments is to include data that can be used to simplify downstream processing. For example, enriching device telemetry messages with a device twin tag can reduce load on customers to make device twin API calls for this information.
D: Applying enrichments
The messages can come from any data source supported by IoT Hub message routing, including the following examples:
-->device twin change notifications -- changes in the device twin device telemetry, such as temperature or pressure device life-cycle events, such as when the device is created or deleted Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-message-enrichments-overview
NEW QUESTION 16
You need to store the real-time alerts generated by Stream Analytics to meet the technical requirements.
Which type of Stream Analytics output should you configure?
- A. Azure Blob storage
- B. Microsoft Power BI
- C. Azure SQL Database
- D. Azure Cosmos DB
Answer: A
Explanation:
When you create a Time Series Insights Preview pay-as-you-go (PAYG) SKU environment, you create two Azure resources:
An Azure Storage general-purpose V1 blob account for cold data storage.
An Azure Time Series Insights Preview environment that can be configured for warm data storage.
Reference:
https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-update-storage-ingress
NEW QUESTION 17
You have 10,000 IoT devices that connect to an Azure IoT hub. The devices do not support over-the-air (OTA) updates.
You need to decommission 1,000 devices. The solution must prevent connections and autoenrollment for the decommissioned devices.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. Blacklist the X.509 root certification authority (CA) certificate for the enrollment group.
- B. Remove the identity certificate from the hardware security module (HSM) of the devices.
- C. Delete the device identity from the device registry of the IoT hub.
- D. Delete the enrollment entry for the devices.
- E. Update the connectionState device twin property on all the devices.
Answer: C,D
Explanation:
In general, deprovisioning a device involves two steps:
* Disenroll the device from your provisioning service, to prevent future auto-provisioning. Depending on whether you want to revoke access temporarily or permanently, you may want to either disable or delete an enrollment entry.
* Deregister the device from your IoT Hub, to prevent future communications and data transfer. Again, you can temporarily disable or permanently delete the device's entry in the identity registry for the IoT Hub where it was provisioned.
Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/how-to-unprovision-devices
NEW QUESTION 18
You have 1,000 devices that connect to a standard tier Azure IoT hub.
All the devices are commissioned and send telemetry events to the built-in IoT Hub endpoint.
You configure message enrichment on the events endpoint and set the enrichment value to
$twin.tags.ipV4.
When you inspect messages on the events endpoint, you discover that all the messages are stamped with a string of "$twin.tags.ipV4".
What are two possible causes of the issue? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. The ipV4tag is a restricted twin property that is unavailable for message enrichment.
- B. A standard tier IoT hub does not support device twin properties in message enrichments.
- C. Message enrichment cannot be added to messages going to a built-in endpoint.
- D. The device twin property value used for message enrichment is set to "$twin.tags.ipV4".
- E. The device twin path used for the value of the enrichment does not exist.
- F. The device sending the message has no device twin.
Answer: E,F
Explanation:
In some cases, if you are applying an enrichment with a value set to a tag or property in the device twin, the value will be stamped as a string value. For example, if an enrichment value is set to $twin.tags.field, the messages will be stamped with the string "$twin.tags.field" rather than the value of that field from the twin. This happens in the following cases:
* (C) Your IoT Hub is in the standard tier, but the device sending the message has no device twin.
* (E) Your IoT Hub is in the standard tier, but the device twin path used for the value of the enrichment does not exist. For example, if the enrichment value is set to $twin.tags.location, and the device twin does not have a location property under tags, the message is stamped with the string "$twin.tags.location".
* Your IoT Hub is in the basic tier. Basic tier IoT hubs do not support device twins.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-message-enrichments-overview
NEW QUESTION 19
Your company is creating a new camera security system that will use Azure IoT Hub.
You plan to use an Azure IoT Edge device that will run Ubuntu Server 18.04.
You need to configure the IoT Edge device.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Run the following commands
2 - From Iot Hub,create an IoT Edge device registry entry.
3 - Add the connection string to..
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/how-to-install-iot-edge-linux
NEW QUESTION 20
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this question, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure IoT solution that includes an Azure IoT hub, a Device Provisioning Service instance, and
1,000 connected IoT devices.
All the IoT devices are provisioned automatically by using one enrollment group.
You need to temporarily disable the IoT devices from the connecting to the IoT hub.
Solution: From the IoT hub, you change the credentials for the shared access policy of the IoT devices.
Does the solution meet the goal?
- A. No
- B. Yes
Answer: A
Explanation:
Explanation/Reference:
https://docs.microsoft.com/bs-latn-ba/azure/iot-dps/how-to-unprovision-devices
NEW QUESTION 21
You have 20 devices that connect to an Azure IoT hub.
You open Azure Monitor as shown in the exhibit. (Click the Exhibit tab.)
You discover that telemetry is not being received from five IoT devices.
You need to identify the names of the devices that are not generating telemetry and visualize the dat a. What should you do first?
- A. Configure diagnostics for Connections and send the logs to Azure Log Analytics.
- B. Add the Number of throttling errors metric and archive the logs to an Azure storage account.
- C. Add the Telemetry messages sent metric and archieve the logs to an Azure Storage account.
- D. Configure diagnostics for Routes and stream the logs to Azure Event Hubs.
Answer: A
Explanation:
To log device connection events and errors, turn on diagnostics for IoT Hub. We recommend turning on these logs as early as possible, because if diagnostic logs aren't enabled, when device disconnects occur, you won't have any information to troubleshoot the problem with.
Sign in to the Azure portal.
Browse to your IoT hub.
Select Diagnostics settings.
Select Turn on diagnostics.
Enable Connections logs to be collected.
For easier analysis, turn on Send to Log Analytics
Reference:
https://docs.microsoft.com/bs-cyrl-ba/azure/Iot-hub/iot-hub-troubleshoot-connectivity
NEW QUESTION 22
You have 1,000 devices that connect to an Azure IoT hub.
You are performing a scheduled check of deployed IoT devices. You plan to run the following command from the Azure CLI prompt.
aziot hub query --hub-name hub1 --query-command "SELECT * FROM devices WHERE connectionState = 'Disconnected'" What does the command return?
- A. the Device Disconnected events
- B. the Connections logs
- C. the device twins
- D. the device credentials
Answer: A
Explanation:
The IoT Hub publishes the Microsoft.Devices.DeviceDisconnected event type, which is published when a device is disconnected from an IoT hub.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-event-grid#event-types
NEW QUESTION 23
During the POV phase, telemetry from IoT Hub stops flowing to the hot path. The cold path continues to work.
What should you do to restore the hot path?
- A. Run the Test all routes action.
- B. Modify cold-route to send only some telemetry data to the cold path.
- C. Disable the fallback route.
- D. Create an explicit route for the hot path.
Answer: D
NEW QUESTION 24
You have an Azure IoT solution that includes an Azure IoT hub, a Device Provisioning Service instance, and 1,000 connected IoT devices. The IoT devices are allocated to tour enrollment groups. Each enrollment group is configured to use certificate attestation.
You need to decommission all the devices in a single enrollment group and the enrollment group itself.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
To deprovision all of the devices that have been provisioned through an enrollment group:
Disable the enrollment group to disallow its signing certificate.
Use the list of provisioned devices for that enrollment group to disable or delete each device from the identity registry of its respective IoT hub.
After disabling or deleting all devices from their respective IoT hubs, you can optionally delete the enrollment group. Be aware, though, that, if you delete the enrollment group and there is an enabled enrollment group for a signing certificate higher up in the certificate chain of one or more of the devices, those devices can re-enroll.
Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/how-to-unprovision-devices
NEW QUESTION 25
You have an Azure Stream Analytics job that connects to an Azure IoT hub named Hub1445 as a streamingdata source. Hub1445 is configured as shown in the exhibit. (Click the Exhibit tab.)
The Stream Analytics job fails to receive any messages from the IoT hub. What should you do to resolve the issue?
- A. Enable the Route3 route.
- B. Enable the fallback route.
- C. Disable the Route2 route.
- D. Change the Route1 route query to true.
Answer: D
Explanation:
The device telemetry is usually passed as JSON from the device through the IoT Hub - this is handled nicely by Azure Streaming Analytics queries.
The IoT Hub message routing should be configured as follows: Data source: Device Telemetry Messages Routing query: true (as the routing query is an expression that evaluates to true or false for each received message, the simplest way to send all messages to the endpoint is to just supply true as the query).
Reference:
https://darenmay.com/blog/azure-iot-streaming-analytics-data-lake-analytics-and-json/
NEW QUESTION 26
You create a new IoT device named device1 on iothub1. Device1 has a primary key of Uihuih76hbHb.
How should you complete the device connection string? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: iothub1
The Azure IoT hub is named iothub1.
Box 2: azure-devices.net
The format of the device connection string looks like:
HostName={YourIoTHubName}.azure-devices.net;DeviceId=MyNodeDevice;SharedAccessKey={YourSharedAccessKey} Box 1: device1 Device1 has a primary key of Uihuih76hbHb.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/quickstart-control-device-dotnet
NEW QUESTION 27
You have an Azure IoT hub.
You plan to deploy 1,000 IoT devices by using automatic device management.
The device twin is shown below.
You need to configure automatic device management for the deployment.
Which target Condition and Device Twin Path should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-automatic-device-management
NEW QUESTION 28
You have three Azure IoT hubs named Hub1, Hub2, and Hub3, a Device Provisioning Service instance, and an IoT device named Device1.
Each IoT hub is deployed to a separate Azure region.
Device enrollment uses the Lowest latency allocation policy.
The Device Provisioning Service uses the Lowest latency allocation policy.
Device1 is auto-provisioned to Hub1 by using the Device Provisioning Service.
Device1 regularly moves between regions.
You need to ensure that Device1 always connects to the IoT hub that has the lowest latency.
What should you do?
- A. Configure device attestation that uses X.509 certificates.
- B. Configure the re-provisioning policy.
- C. Implement device certificate rolling.
- D. Disenroll and reenroll Device1.
Answer: B
Explanation:
Automated re-provisioning support.
Microsoft added first-class support for device re-provisioning which allows devices to be reassigned to a different IoT solution sometime after the initial solution assignment. Re-provisioning support is available in two options:
* Factory reset, in which the device twin data for the new IoT hub is populated from the enrollment list instead of the old IoT hub. This is common for factory reset scenarios as well as leased device scenarios.
* Migration, in which device twin data is moved from the old IoT hub to the new IoT hub. This is common for scenarios in which a device is moving between geographies.
Reference:
https://azure.microsoft.com/en-us/blog/new-year-newly-available-iot-hub-device-provisioning-service-features/
NEW QUESTION 29
You plan to deploy an Azure IoT hub.
The IoT hub must support the following:
* Three Azure IoT Edge devices
* 2,500 IoT devices
Each IoT device will spend a 6 KB message every five seconds.
You need to size the IoT hub to support the devices. The solution must minimize costs.
What should you choose?
- A. one unit of the B1 tier
- B. one unit of the S3 tier
- C. one unit of the B2 tier
- D. one unit of the S1 tier
Answer: B
Explanation:
2500* 6 KB * 12 = 180,000 KB/minute = 180 MB/Minute.
B3, S3 can handle up to 814 MB/minute per unit.
Incorrect Answers:
A, C: B1, S1 can only handle up to 1111 KB/minute per unit
B: B2, S2 can only handle up to 16 MB/minute per unit.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-scaling
NEW QUESTION 30
You have an Azure IoT Edge solution.
You plan to deploy an Azure Security Center for IoT security agent. You need to configure the security agent to meet the following requirements:
Connection events must be reported as high priority.
High priority events must be collected every seven minutes.
How should you configure the azureiotsecurity module twin? To answer, drag the appropriate values to the correct locations. Each value may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION 31
You have an IoT device that gathers data in a CSV file named Sensors.csv.
You deploy an Azure IoT hub that is accessible at ContosoHub.azure-devices.net.
You need to ensure that Sensors.csv is uploaded to the IoT hub.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. From the Azure subscription, select the IoT hub, select File upload, and then configure a storage container.
- B. Upload Sensors.csv by using the IoT Hub REST API.
- C. From the Azure subscription, select the IoT hub, select Message routing, and then configure a route to storage.
- D. Configure the device to use a GETrequest to ContosoHub.azure-devices.net/devices/ContosoDevice1/files/ notifications.
Answer: A,B
Explanation:
C: To use the file upload functionality in IoT Hub, you must first associate an Azure Storage account with your hub. Select File upload to display a list of file upload properties for the IoT hub that is being modified.
For Storage container: Use the Azure portal to select a blob container in an Azure Storage account in your current Azure subscription to associate with your IoT Hub. If necessary, you can create an Azure Storage account on the Storage accounts blade and blob container on the Containers A: IoT Hub has an endpoint specifically for devices to request a SAS URI for storage to upload a file. To start the file upload process, the device sends a POST request to {iot hub}.azure-devices.net/devices/{deviceId}/files with the following JSON body:
{
"blobName": "{name of the file for which a SAS URI will be generated}"
}
Incorrect Answers:
D: Deprecated: initialize a file upload with a GET. Use the POST method instead.
Reference:
https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/iot-hub/iot-hub-configure-file-upload.md
NEW QUESTION 32
You have an Azure IoT hub that has a hostname of contoso-hub.azure-devices.net and an MCU-based IoT device named Device1. Device1 does NOT support Azure IoT SDKs.
You plan to connect Device1 to the IoT hub by using the Message Queuing Telemetry Transport (MQTT) protocol and to authenticate by using X.509 certificates.
You need to ensure that Device1 can authenticate to the IoT hub.
What should you do?
- A. From the Azure portal, create an IoT Hub Device Provisioning Service (DPS) instance and add a certificate enrollment for Device1.
- B. Create an Azure key vault and enable the encryption of data at rest for the IoT hub by using a customermanaged key.
- C. Add the DigiCert Baltimore Root Certificate to Device1.
- D. Enable a hardware security module (HSM) on Device1.
Answer: C
Explanation:
Box 1: "desired": {
To configure connection events as high priority and collect high priority events every 7 minutes, use the following configuration.
"desired": {
"ms_iotn:urn_azureiot_Security_SecurityAgentConfiguration": {
"highPriorityMessageFrequency": {
"value": "PT7M"
},
"eventPriorityConnectionCreate": {
"value": "High"
}
Box 2: "highPriorityMessageFrequency ": {
Box 3: "eventPriorityConnectionCreate": {
Reference:
https://docs.microsoft.com/en-us/azure/defender-for-iot/how-to-agent-configuration
NEW QUESTION 33
......
Wrapping up
IoT is a promising field in the IT sector and the Microsoft AZ-220 test acts as an ideal launching pad for this path since such an exam throws light on every essential skill of this subject matter. While you aim at it, don’t overlook the need of referring to updated study materials like official training offered by the vendor.
Authentic Best resources for AZ-220: https://www.exams4sures.com/Microsoft/AZ-220-practice-exam-dumps.html
AZ-220 Test Engine Practice Exam: https://drive.google.com/open?id=1-mCLMvIykLXHF11srkKHMNxPD4b18DoD