Ultimate Guide to Prepare Free Microsoft AZ-220 Exam Questions & Answer
Pass Microsoft AZ-220 Tests Engine pdf - All Free Dumps
Microsoft AZ-220 Exam Syllabus Topics:
| Topic | Details |
|---|---|
Set up the IoT Solution Infrastructure (10-15%) | |
| Create and configure an Azure IoT Hub | -create an IoT Hub -register a device -configure a device twin -configure IoT Hub tier and scaling |
| Build device messaging and communication | - build messaging solutions by using SDKs (device and service) -implement device-to-cloud communication -implement cloud-to-device communication -configure file upload for devices - optimize message size and scaling - connect to IoT Hub using TLS server certificates |
| Configure physical IoT devices | -recommend an appropriate protocol based on device specifications -configure device networking, topology, and connectivity |
Provision and Manage Devices (15-20%) | |
| Set Up Device Provisioning Service (DPS) | -create a Device Provisioning Service -create a new enrollment in DPS -link an IoT Hub to the DPS |
| Manage the device lifecycle | -provision a device by using DPS -deprovision an autoenrollment -decommission (disenroll) a device |
| Manage IoT devices by using IoT Hub | -manage devices list in the IoT Hub device registry -modify device twin tags and properties -configure a set of devices by using IoT Hub Automatic Device Management -trigger an action on a set of devices by using IoT Hub Jobs and Direct Methods -implement a device firmware update process by using device management primitives - configure module identities |
| Manage IoT devices by using Azure IoT Central | - create a custom device template by using Azure IoT Central -configure rules and actions in Azure IoT Central - customize the operator view -add and manage devices from IoT Central -troubleshoot device connections and data mapping -create an application based on an app template for an industry vertical - export a custom application template -create and manage a new application based on a custom application template - upgrade and version a device template - run IoT Central jobs |
Implement IoT Edge (15-20%) | |
| Set up an IoT Edge device | -create a device identity in IoT Hub - set up an IoT device for IoT Edge -select and install container runtime on IoT devices -implement module access to the host system - update IoT Edge runtime - provision IoT Edge devices by using DPS |
| Deploy an IoT Edge device | - create and implement a deployment manifest -create a deployment for a single IoT Edge device -create a deployment to target multiple devices -create a continuous deployment by using Azure DevOps |
| Develop IoT Edge modules | - create and customize an Edge module -deploy a custom IoT Edge module to an Edge device -deploy an IoT Edge module from the Azure Marketplace to an Edge device -publish an IoT Edge module to an Azure Container Registry - define module configuration - configure IoT Edge module routing -configure environment for IoT Edge development; debug Edge modules in development environment |
| Configure an IoT Edge device | - select an appropriate gateway pattern -deploy an IoT gateway by using IoT Hub and IoT Edge - configure IoT Edge certificates - implement and configure offline support (including local storage) |
Implement Business Integration (5-10%) | |
| Integrate with upstream and downstream systems | - set up input and output connections -set up IoT Hub routing for triggering workflows - test data interface integration - integrate third-party solutions -configure workflows, including rules and alerts |
| Develop Azure Digital Twins (ADT) solutions | -create ADT models and digital twins -map IoT device data to ADT models and relationships -ingest IoT device messages and translate messages to ADT -configure routes and endpoints to trigger business logic and data processing - query the ADT graph - update properties on ADT entities in the graph - monitor and troubleshoot ADT |
Process and manage data (15-20%) | |
| Configure message routing in Azure IoT Hub | -implement message enrichment in IoT Hub - implement routing of IoT device messages to endpoints -define and test routing queries - configure IoT Hub as an Event Grid source -reconfigure the default EventHub endpoint when there are multiple endpoints |
| Configure stream processing of IoT data | -create ASA for data and stream processing of IoT data -process and filter IoT data by using Azure Functions - write user-defined functions and aggregations in ASA - consume Azure Machine Learning functions in ASA - configure Stream Analytics outputs |
| Create ASA queries | - write an ASA query that runs in the IoT Edge - write an ASA query that runs in the cloud |
| Process real-time data by using Time Series Insights (TSI) | - create a TSI environment - connect the IoT Hub and the TSI environment - create a reference data set for a TSI environment by using the Azure portal - implement Time Series model hierarchies, types, and instance fields - consume data by using Time Series Expression syntax |
Monitor, troubleshoot, and optimize IoT solutions (15-20%) | |
| Configure health monitoring | -configure metrics in IoT Hub -set up diagnostics logs for Azure IoT Hub - configure IoT Hub scaling (SKUunit) programmatically -query and visualize tracing by using Azure Monitor - apply Azure Policy definitions for IoT Hub - gather IoT Edge metrics - retrieve diagnostics from Azure IoT Edge |
| Troubleshoot device communication | -establish maintenance communication by using RDP or SSH - establish maintenance communication by using Device Streams -verify device telemetry is received by IoT Hub -validate device twin properties, tags and direct methods -troubleshoot device disconnects and connects - troubleshoot IoT Edge devices |
| Ensure performance and availability | - identify and resolve bottlenecks -calculate capacity requirements for each service -create a simulated fleet of devices for performance and stress testing - troubleshoot message loss - test manual failover |
Implement security (10-15%) | |
| Implement security for IoT devices and services | - implement device and gateway security - ensure secure connections |
| Implement Azure Defender for IoT | -configure an Azure Defender for IoT agent-based solution - implement Defender-IoT-micro-agents (security agents) -configure built-in and custom alerts for IoT Hub |
Test Characteristics
Validation AZ-220 is a job role-based specialty-level exam designed to hone test-takers’ skills at multiple levels. To achieve this aim, the test takes the help of a strict exam structure, which includes 40-60 multiple-choice questions that also might have other formats like best answers, case studies, etc. Next, the Microsoft AZ-220 exam aspirant must secure a minimum 70% score to come up with flying color in the official testing. In addition, an exam like this is available in the English, Japanese, Chinese (Simplified), and Korean languages globally. The standard fee for AZ-220 is $165, which should be paid as an exam voucher. Take note that the exam voucher once purchased is not refundable and non-transferable.
NEW QUESTION 15
You have three Azure IoT hubs named Hub1, Hub2, and Hub3, a Device Provisioning Service instance, and an IoT device named Device1.
Each IoT hub is deployed to a separate Azure region. Device enrollment uses the Lowest latency allocation policy.
The Device Provisioning Service uses the Lowest latency allocation policy. Device1 is auto-provisioned to Hub1 by using the Device Provisioning Service. Device1 regularly moves between regions.
You need to ensure that Device1 always connects to the IoT hub that has the lowest latency. What should you do?
- A. Disenroll and reenroll Device1.
- B. Configure the re-provisioning policy.
- C. Implement device certificate rolling.
- D. Configure device attestation that uses X.509 certificates.
Answer: B
NEW QUESTION 16
You are writing code to provision IoT devices by using the Device Provisioning Service.
Which two details from the Overview blade of the Device Provisioning Service are required to provision a new IoT client device? To answer, select the appropriate detail in the answer are a.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: ID Scope
In the Azure portal, select the Overview blade for your Device Provisioning service and copy the ID Scope value. The ID Scope is generated by the service and guarantees uniqueness. It is immutable and used to uniquely identify the registration IDs.
Box 2: Global device endpoint
The global_prov_uri variable, which allows the IoT Hub client registration API IoTHubClient_LL_CreateFromDeviceAuth to connect with the designated Device Provisioning Service instance.
Example code:
static const char* global_prov_uri = "global.azure-devices-provisioning.net"; static const char* id_scope = "[ID Scope]"; Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/tutorial-set-up-device
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of the exam. After you begin a new section, you cannot return to this section.
NEW QUESTION 17
You have an Azure IoT hub that uses a Device Provisioning Service instance.
You create a new individual device enrollment that uses symmetric key attestation.
Which detail from the enrollment is required to auto provision the device by using the Device Provisioning Service?
- A. the primary key of the enrollment
- B. the device identity of the IoT hub
- C. the registration ID of the enrollment
- D. the hostname of the IoT hub
Answer: C
Explanation:
The registration ID is used to uniquely identify a device registration with the Device Provisioning Service. The device ID must be unique in the provisioning service ID scope. Each device must have a registration ID.
Note: An individual enrollment is an entry for a single device that may register. Individual enrollments may use either X.509 leaf certificates or SAS tokens (from a physical or virtual TPM) as attestation mechanisms. The registration ID in an individual enrollment is alphanumeric, lowercase, and may contain hyphens.
Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/concepts-service#enrollment
NEW QUESTION 18
You are troubleshooting an Azure IoT hub.
You discover that some telemetry messages are dropped before they reach downstream processing. You suspect that IoT Hub throttling is the root cause.
Which log in the Diagnostics settings of the IoT hub should you use to capture the throttling error events?
- A. Connections
- B. Routes
- C. DeviceTelemetry
- D. C2DCommands
Answer: C
Explanation:
The device telemetry category tracks errors that occur at the IoT hub and are related to the telemetry pipeline. This category includes errors that occur when sending telemetry events (such as throttling) and receiving telemetry events (such as unauthorized reader). This category cannot catch errors caused by code running on the device itself.
Note: The metric d2c.telemetry.ingress.sendThrottle is the number of throttling errors due to device throughput throttles.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-monitor-resource-health
NEW QUESTION 19
You develop a custom Azure IoT Edge module named temperature-module.
You publish temperature-module to a private container registry named mycr.azurecr.io You need to build a deployment manifest for the IoT Edge device that will run temperature-module.
Which three container images should you define in the manifest? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. mcr.microsoft.com/azureiotedge-simulated-temperature-sensor:1.0
- B. mcr.microsoft.com/iotedgedev:2.0
- C. mycr.azurecr.io/temperature-module:latest
- D. mcr.microsoft.com/azureiotedge-agent:1.0
- E. mcr.microsoft.com/azureiotedge-hub:1.0
Answer: C,D,E
Explanation:
Each IoT Edge device runs at least two modules: $edgeAgent and $edgeHub, which are part of the IoT Edge runtime. IoT Edge device can run multiple additional modules for any number of processes. Use a deployment manifest to tell your device which modules to install and how to configure them to work together.
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/module-composition
NEW QUESTION 20
You have an Azure IoT hub that is being taken from prototype to production.
You plan to connect IoT devices to the IoT hub. The devices have hardware security modules (HSMs).
You need to use the most secure authentication method between the devices and the IoT hub. Company policy prohibits the use of internally generated certificates.
Which authentication method should you use?
- A. a certificate thumbprint
- B. An X.509 certificate signed by a root certification authority (CA).
- C. an X.509 self-signed certificate
- D. a symmetric key
Answer: B
Explanation:
Purchase X.509 certificates from a root certificate authority (CA). This method is recommended for production environments.
The hardware security module, or HSM, is used for secure, hardware-based storage of device secrets, and is the most secure form of secret storage. Both X.509 certificates and SAS tokens can be stored in the HSM Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/concepts-security
NEW QUESTION 21
You have an Azure IoT hub.
You plan to attach three types of IoT devices as shown in the following table.
You need to select the appropriate communication protocol for each device.
What should you select? To answer, drag the appropriate protocols to the correct devices. Each protocol may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: AMQP
Use AMQP on field and cloud gateways to take advantage of connection multiplexing across devices.
Box 2: MQTT
MQTT is used on all devices that do not require to connect multiple devices (each with its own per-device credentials) over the same TLS connection.
Box 3: HTTPS
Use HTTPS for devices that cannot support other protocols.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-protocols
NEW QUESTION 22
You have 1,000 devices that connect to a standard tier Azure IoT hub.
All the devices are commissioned and send telemetry events to the built-in IoT Hub endpoint. You configure message enrichment on the events endpoint and set the enrichment value to$twin.tags.ipV4.
When you inspect messages on the events endpoint, you discover that all the messages are stamped with a string of "$twin.tags.ipV4".
What are two possible causes of the issue? Each Answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Message enrichment cannot be added to messages going to a built-in endpoint.
- B. The device sending the message has no device twin.
- C. The device twin property value used for message enrichment is set to "$twin.tags.ipV4".
- D. The device twin path used for the value of the enrichment does not exist.
- E. A standard tier IoT hub does not support device twin properties in message enrichments.
- F. The ipV4 tag is a restricted twin property that is unavailable for message enrichment.
Answer: B,D
Explanation:
In some cases, if you are applying an enrichment with a value set to a tag or property in the device twin, the value will be stamped as a string value. For example, if an enrichment value is set to $twin.tags.field, the messages will be stamped with the string "$twin.tags.field" rather than the value of that field from the twin. This happens in the following cases:
(C) Your IoT Hub is in the standard tier, but the device sending the message has no device twin.
(E) Your IoT Hub is in the standard tier, but the device twin path used for the value of the enrichment does not exist. For example, if the enrichment value is set to $twin.tags.location, and the device twin does not have a location property under tags, the message is stamped with the string "$twin.tags.location".
Your IoT Hub is in the basic tier. Basic tier IoT hubs do not support device twins.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-message-enrichments-overview
NEW QUESTION 23
You create an Azure IoT hub by running the following command.
aziot hub create --resource-group MyResourceGroup --name MyIotHub --sku B1 -- location westus --partition-count 4 What does MylotHub support?
- A. cloud-to-device messaging
- B. Device Provisioning Service
- C. device twins
- D. Azure IoT Edge
Answer: B
Explanation:
The Device Provisioning Service is included in the Basic Tiers (such as B1).
Incorrect Answers:
B, C, D: The Standard tier is needed for cloud-to-device messaging, Azure IoT Edge, and device twins.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-scaling
NEW QUESTION 24
You have an Azure IoT Central application.
You add an IoT device named Oven1 to the application. Oven1 uses an IoT Central template for industrial ovens.
You need to send an email to the managers group at your company as soon as the oven temperature falls below 400 degrees.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. From IoT Central, create a telemetry rule for the template.
- B. Create a SendGrid account in the same resource group as the IoT Central application.
- C. Add a condition that has Time Aggregation set to Off.
- D. Add a condition that has Aggregation set to Minimum.
- E. Add the Manager role to the IoT Central application.
Answer: A,C
Explanation:
Devices use telemetry to send numerical data from the device. A rule triggers when the selected telemetry crosses a specified threshold.
E: To create a telemetry rule, the device template must include at least one telemetry value. The rule monitors the temperature reported by the device and sends an email when it falls below 400 degrees.
B: Configure the rule conditions.
Conditions define the criteria that the rule monitors. In this tutorial, you configure the rule to fire when the temperature exceeds 70°F.
1. Select Temperature in the Telemetry dropdown.
2. Next, choose Is less than as the Operator and enter 400 as the Value.
3. Optionally, you can set a Time aggregation. When you select a time aggregation, you must also select an aggregation type, such as average or sum from the aggregation drop-down.
Without aggregation, the rule triggers for each telemetry data point that meets the condition.
With aggregation, the rule triggers if the aggregate value of the telemetry data points in the time window meets the condition.
Reference:
https://docs.microsoft.com/en-us/azure/iot-central/core/tutorial-create-telemetry-rules
NEW QUESTION 25
You have 100 devices that connect to an Azure IoT hub.
You need to be notified about failed local logins to a subnet of the devices.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
Step 1: Enable Azure Security Center for IoT
Security alerts, such as failed local IoT hub logins, are stored in AzureSecurityOfThings.SecurityAlert table in the Log Analytics workspace configured for the Azure Security Center for IoT solution.
Step 2: Select a device security group
Update a device security group..
Step 3: Create a custom alert rule
..by creating a custom alert rule
Reference:
https://docs.microsoft.com/bs-latn-ba/azure/asc-for-iot/how-to-security-data-access
https://docs.microsoft.com/en-us/rest/api/securitycenter/devicesecuritygroups/createorupdate
NEW QUESTION 26
You have 100 devices that connect to an Azure IoT hub.
You need to be notified about failed local logins to a subnet of the devices.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Enable Azure Security Center for IoT
2 - Select a device security group
3 - Create a custom alert rule
Reference:
https://docs.microsoft.com/bs-latn-ba/azure/asc-for-iot/how-to-security-data-access
https://docs.microsoft.com/en-us/rest/api/securitycenter/devicesecuritygroups/createorupdate
NEW QUESTION 27
You have an Azure IoT solution that includes an Azure IoT hub, a Device Provisioning Service instance, and 1,000 connected IoT devices. The IoT devices are allocated to tour enrollment groups. Each enrollment group is configured to use certificate attestation.
You need to decommission all the devices in a single enrollment group and the enrollment group itself.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
1 - Disable the enrollment group
2 - delete each device from the identity registry.
3 - Delete the enrollment group.
Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/how-to-unprovision-devices
NEW QUESTION 28
You plan to deploy Azure Time Series Insights.
What should you create on iothub1 before you deploy Time Series Insights?
- A. a new consumer group
- B. a new message route
- C. an IP filter rule
- D. a new shared access policy
Answer: A
Explanation:
Create a dedicated consumer group in the IoT hub for the Time Series Insights environment to consume from.
Each Time Series Insights event source must have its own dedicated consumer group that isn't shared with any other consumer. If multiple readers consume events from the same consumer group, all readers are likely to exhibit failures.
Reference:
https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-how-to-add-an-event-source- iothub
NEW QUESTION 29
You have an Azure IoT hub that uses a Device Provision Service instance.
You plan to deploy 100 IoT devices.
You need to confirm the identity of the devices by using the Device Provision Service.
Which three device attestation mechanisms can you use? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Trusted Platform Module (TPM) 1.2
- B. Symmetric key
- C. Trusted Platform Module (TPM) 2.0
- D. Device Identity Composition Engine (DICE)
D18912E1457D5D1DDCBD40AB3BF70D5D - E. 509 certificates based on the standard X.509 certificate authentication flow.
Trusted Platform Module (TPM) based on a nonce challenge, using the TPM 2.0 standard for keys to present a signed Shared Access Signature (SAS) token. This does not require a physical TPM on the device, but the service expects to attest using the endorsement key per the TPM spec.
Symmetric Key based on shared access signature (SAS) Security tokens, which include a hashed signature and an embedded expiration. - F. X.509 certificates
Answer: B,C,F
Explanation:
The Device Provisioning Service supports the following forms of attestation:
Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/concepts-service#attestation-mechanism
NEW QUESTION 30
......
Exam AZ-220: Microsoft Azure IoT Developer
Candidates for this exam should have subject matter expertise implementing the configuration and coding tasks required to create and maintain the cloud and edge portions of an IoT solution.
Candidates for this exam should have a general understanding of device types and Azure services, including data storage options, data analysis, data processing, AI, and other platform as a service (PaaS) options. They must be able to program in at least one Azure IoT software development kit–supported (SDK–supported) language.
Part of the requirements for: Microsoft Certified: Azure IoT Developer Specialty
Microsoft Azure IoT Developer Practice Tests 2022 | Pass AZ-220 with confidence!: https://drive.google.com/open?id=1ebwFaJ29mEMOf1JoKew04Fmf-BXsMaLK
Online Exam Practice Tests with detailed explanations!: https://www.ipassleader.com/Microsoft/AZ-220-practice-exam-dumps.html