2021 Realistic Verified Free Microsoft AZ-220 Exam Questions
AZ-220 Real Exam Questions and Answers FREE
Microsoft AZ-220 Exam Syllabus Topics:
| Topic | Details |
|---|---|
Set up the IoT Solution Infrastructure (10-15%) | |
| Create and configure an Azure IoT Hub | -create an IoT Hub -register a device -configure a device twin -configure IoT Hub tier and scaling |
| Build device messaging and communication | - build messaging solutions by using SDKs (device and service) -implement device-to-cloud communication -implement cloud-to-device communication -configure file upload for devices - optimize message size and scaling - connect to IoT Hub using TLS server certificates |
| Configure physical IoT devices | -recommend an appropriate protocol based on device specifications -configure device networking, topology, and connectivity |
Provision and Manage Devices (15-20%) | |
| Set Up Device Provisioning Service (DPS) | -create a Device Provisioning Service -create a new enrollment in DPS -link an IoT Hub to the DPS |
| Manage the device lifecycle | -provision a device by using DPS -deprovision an autoenrollment -decommission (disenroll) a device |
| Manage IoT devices by using IoT Hub | -manage devices list in the IoT Hub device registry -modify device twin tags and properties -configure a set of devices by using IoT Hub Automatic Device Management -trigger an action on a set of devices by using IoT Hub Jobs and Direct Methods -implement a device firmware update process by using device management primitives - configure module identities |
| Manage IoT devices by using Azure IoT Central | - create a custom device template by using Azure IoT Central -configure rules and actions in Azure IoT Central - customize the operator view -add and manage devices from IoT Central -troubleshoot device connections and data mapping -create an application based on an app template for an industry vertical - export a custom application template -create and manage a new application based on a custom application template - upgrade and version a device template - run IoT Central jobs |
Implement IoT Edge (15-20%) | |
| Set up an IoT Edge device | -create a device identity in IoT Hub - set up an IoT device for IoT Edge -select and install container runtime on IoT devices -implement module access to the host system - update IoT Edge runtime - provision IoT Edge devices by using DPS |
| Deploy an IoT Edge device | - create and implement a deployment manifest -create a deployment for a single IoT Edge device -create a deployment to target multiple devices -create a continuous deployment by using Azure DevOps |
| Develop IoT Edge modules | - create and customize an Edge module -deploy a custom IoT Edge module to an Edge device -deploy an IoT Edge module from the Azure Marketplace to an Edge device -publish an IoT Edge module to an Azure Container Registry - define module configuration - configure IoT Edge module routing -configure environment for IoT Edge development; debug Edge modules in development environment |
| Configure an IoT Edge device | - select an appropriate gateway pattern -deploy an IoT gateway by using IoT Hub and IoT Edge - configure IoT Edge certificates - implement and configure offline support (including local storage) |
Implement Business Integration (5-10%) | |
| Integrate with upstream and downstream systems | - set up input and output connections -set up IoT Hub routing for triggering workflows - test data interface integration - integrate third-party solutions -configure workflows, including rules and alerts |
| Develop Azure Digital Twins (ADT) solutions | -create ADT models and digital twins -map IoT device data to ADT models and relationships -ingest IoT device messages and translate messages to ADT -configure routes and endpoints to trigger business logic and data processing - query the ADT graph - update properties on ADT entities in the graph - monitor and troubleshoot ADT |
Process and manage data (15-20%) | |
| Configure message routing in Azure IoT Hub | -implement message enrichment in IoT Hub - implement routing of IoT device messages to endpoints -define and test routing queries - configure IoT Hub as an Event Grid source -reconfigure the default EventHub endpoint when there are multiple endpoints |
| Configure stream processing of IoT data | -create ASA for data and stream processing of IoT data -process and filter IoT data by using Azure Functions - write user-defined functions and aggregations in ASA - consume Azure Machine Learning functions in ASA - configure Stream Analytics outputs |
| Create ASA queries | - write an ASA query that runs in the IoT Edge - write an ASA query that runs in the cloud |
| Process real-time data by using Time Series Insights (TSI) | - create a TSI environment - connect the IoT Hub and the TSI environment - create a reference data set for a TSI environment by using the Azure portal - implement Time Series model hierarchies, types, and instance fields - consume data by using Time Series Expression syntax |
Monitor, troubleshoot, and optimize IoT solutions (15-20%) | |
| Configure health monitoring | -configure metrics in IoT Hub -set up diagnostics logs for Azure IoT Hub - configure IoT Hub scaling (SKUunit) programmatically -query and visualize tracing by using Azure Monitor - apply Azure Policy definitions for IoT Hub - gather IoT Edge metrics - retrieve diagnostics from Azure IoT Edge |
| Troubleshoot device communication | -establish maintenance communication by using RDP or SSH - establish maintenance communication by using Device Streams -verify device telemetry is received by IoT Hub -validate device twin properties, tags and direct methods -troubleshoot device disconnects and connects - troubleshoot IoT Edge devices |
| Ensure performance and availability | - identify and resolve bottlenecks -calculate capacity requirements for each service -create a simulated fleet of devices for performance and stress testing - troubleshoot message loss - test manual failover |
Implement security (10-15%) | |
| Implement security for IoT devices and services | - implement device and gateway security - ensure secure connections |
| Implement Azure Defender for IoT | -configure an Azure Defender for IoT agent-based solution - implement Defender-IoT-micro-agents (security agents) -configure built-in and custom alerts for IoT Hub |
NEW QUESTION 26
DRAG DROP
You need to install the Azure IoT Edge runtime on a new device that runs Windows 10 IoT Enterprise.
Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Answer:
Explanation:
Explanation:
Step 1: From Azure IoT Hub, create an IoT Edge Device
Step 2: Deploy-IoTEdge
The Deploy-IoTEdge command checks that your Windows machine is on a supported version, turns on the containers feature, and then downloads the moby runtime and the IoT Edge runtime. The command defaults to using Windows containers.
{Invoke-WebRequest -useb https://aka.ms/iotedge-win} | Invoke-Expression; ` Deploy-IoTEdge Step 3: Initialize-IoTEdge The Initialize-IoTEdge command configures the IoT Edge runtime on your machine. The command defaults to manual provisioning with Windows containers.
{Invoke-WebRequest -useb https://aka.ms/iotedge
Step 4: Enter the IoT Edge device connection string.
When prompted, provide the device connection string that you retrieved in step 1. The device connection string associates the physical device with a device ID in IoT Hub.
Reference:
https://docs.microsoft.com/en-us/azure/iot-edge/module-composition
NEW QUESTION 27
You have an Azure IoT hub.
You plan to implement IoT Hub events by using Azure Event Grid.
You need to send an email when the following events occur:
* Device Created
* Device Deleted
* Device Connected
* Device Disconnected
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. From the IoT hub, configure an event subscription that has Web Hook as the Endpoint Type.
- B. From the IoT hub, configure an event subscription that has API management as the Endpoint Type.
- C. Create an Azure logic app that has a Request trigger.
- D. From the IoT hub, configure an event subscription that has Service Bus Queue as the Endpoint Type.
Answer: A,C
Explanation:
For non-telemetry events like DeviceConnected, DeviceDisconnected, DeviceCreated and DeviceDeleted, the Event Grid filtering can be used when creating the subscription.
C: Azure Event Grid enables you to react to events in IoT Hub by triggering actions in your downstream business applications.
A trigger, such as a Request trigger, is a specific event that starts your logic app.
Reference:
https://docs.microsoft.com/en-us/azure/event-grid/publish-iot-hub-events-to-logic-apps
NEW QUESTION 28
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have devices that connect to an Azure IoT hub. Each device has a fixed GPS location that includes latitude and longitude.
You discover that a device entry in the identity registry of the IoT hub is missing the GPS location.
You need to configure the GPS location for the device entry. The solution must prevent the changes from being propagated to the physical device.
Solution: You add tags to the device twin.
Does the solution meet the goal?
- A. No
- B. Yes
Answer: B
Explanation:
Tags are not synced.
Tags: A section of the JSON document that the solution back end can read from and write to. Tags are not visible to device apps.
Reference:
https://docs.microsoft.com/de-de/azure/iot-hub/iot-hub-devguide-device-twins
https://azure.microsoft.com/sv-se/blog/deep-dive-into-azure-iot-hub-notifications-and-device-twin/
NEW QUESTION 29
You create an Azure IoT hub by running the following command.
aziot hub create --resource-group MyResourceGroup --name MyIotHub --sku B1 -- location westus --partition-count 4 What does MylotHub support?
- A. device twins
- B. cloud-to-device messaging
- C. Device Provisioning Service
- D. Azure IoT Edge
Answer: C
Explanation:
The Device Provisioning Service is included in the Basic Tiers (such as B1).
Incorrect Answers:
B, C, D: The Standard tier is needed for cloud-to-device messaging, Azure IoT Edge, and device twins.
Reference:
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-scaling
NEW QUESTION 30
You create an Azure Stream Analytics job that has the following query.
The job is configured to have an Azure IoT Hub input and an output to an Azure function.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Yes
All time handling operations in Azure Stream Analytics are in UTC.
Box 2: No
Tumbling windows are a series of fixed-sized, non-overlapping and contiguous time intervals.
Box 3: Yes
Reference:
https://docs.microsoft.com/en-us/stream-analytics-query/time-management-azure-stream-analytics
NEW QUESTION 31
How should you complete the GROUP BY clause to meet the Streaming Analytics requirements?
- A. GROUP BY SessionWindow(Second, 30, 60)
- B. GROUP BY TumblingWindow(Second, 30)
- C. GROUP BY SlidingWindow(Second, 30)
- D. GROUP BY HoppingWindow(Second, 60, 30)
Answer: B
Explanation:
Scenario: You plan to use a 30-second period to calculate the average temperature reading of the sensors.
Tumbling window functions are used to segment a data stream into distinct time segments and perform a function against them, such as the example below. The key differentiators of a Tumbling window are that they repeat, do not overlap, and an event cannot belong to more than one tumbling window.
InAnswers:
A: Hopping window functions hop forward in time by a fixed period. It may be easy to think of them as Tumbling windows that can overlap, so events can belong to more than one Hopping window result set.
Reference:
https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-window-functions
NEW QUESTION 32
You have an Azure IoT hub that uses a Device Provisioning Service instance.
You have 1,000 legacy IoT devices that only support MAC address or serial number identities. The device do NOT have a security feature that can be used to securely identify the device or a hardware security module (HSM).
You plan to deploy the devices to a secure environment.
You need to configure the Device Provisioning Service instance to ensure that all the devices are identified securely before they receive updates.
Which attestation mechanism should you choose?
- A. X.509 certificates
- B. Trusted Platform Module (TPM) 1.2 attestation
- C. symmetric key attestation
Answer: C
Explanation:
A common problem with many legacy devices is that they often have an identity that is composed of a single piece of information. This identity information is usually a MAC address or a serial number. Legacy devices may not have a certificate, TPM, or any other security feature that can be used to securely identify the device. The Device Provisioning Service for IoT hub includes symmetric key attestation. Symmetric key attestation can be used to identify a device based off information like the MAC address or a serial number.
Reference:
https://docs.microsoft.com/bs-latn-ba/azure/iot-dps/how-to-legacy-device-symm-key
NEW QUESTION 33
You have an Azure IoT Central application that has a custom device template.
You need to configure the device template to support the following activities:
Return the reported power consumption.
Configure the desired fan speed.
Run the device reset routine.
Read the fan serial number.
Which option should you use for each activity? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: Measurement
Telemetry/measurement is a stream of values sent from the device, typically from a sensor. For example, a sensor might report the ambient temperature.
Box 2: Property
The template can provide a writeable fan speed property
Properties represent point-in-time values. For example, a device can use a property to report the target temperature it's trying to reach. You can set writeable properties from IoT Central.
Box 3: Settings
Box 4: Command
You can call device commands from IoT Central. Commands optionally pass parameters to the device and receive a response from the device. For example, you can call a command to reboot a device in 10 seconds.
Reference:
https://docs.microsoft.com/en-us/azure/iot-central/core/howto-set-up-template
NEW QUESTION 34
You have an Azure IoT Central application.
You need to connect an IoT device to the application.
Which two settings do you require in IoT Central to configure the device? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. the IoT hub name
- B. Application Name
- C. Scope ID
- D. Group SAS Primary Key
- E. Device ID
Answer: C,D
Explanation:
Required connection information:
* Group primary key: In your IoT Central application, navigate to Administration > Device Connection > SAS- IoT-Devices. Make a note of the shared access signature Primary key value.
* ID scope: In your IoT Central application, navigate to Administration > Device Connection. Make a note of the ID scope value.
Reference:
https://docs.microsoft.com/bs-cyrl-ba/azure/iot-central/core/tutorial-connect-device-python
NEW QUESTION 35
You have an instance of Azure Time Series Insights and an Azure IoT hub that receives streaming telemetry from IoT devices.
You need to configure Time Series Insights to receive telemetry from the devices.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
Step 1: Create a dedicated consumer group..
Add a consumer group to your IoT hub.
Applications use consumer groups to pull data from Azure IoT Hub. To reliably read data from your IoT hub, provide a dedicated consumer group that's used only by this Time Series Insights environment.
Step 2: Add a new Time Series Insights event source.
Add a new event source
Sign in to the Azure portal.
In the left menu, select All resources. Select your Time Series Insights environment.
Under Settings, select Event Sources, and then select Add.
In the New event source pane, for Event source name, enter a name that's unique to this Time Series Insights environment. For example, enter event-stream.
Step 3: Configure the Time Series event source to connect to an existing IOT hub Step 4: For Source, select IoT Hub.
Step 5: Select a value for Import option:
If you already have an IoT hub in one of your subscriptions, select Use IoT Hub from available subscriptions. This option is the easiest approach.
Reference:
https://docs.microsoft.com/en-us/azure/time-series-insights/time-series-insights-how-to-add-an-event-source-iothub
NEW QUESTION 36
You have an Azure IoT solution that includes an Azure IoT hub, 100 Azure IoT Edge devices, and 500 leaf devices.
You need to perform a key rotation across the devices.
Which three types of entities should you update? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
- A. the $edgeAgent module identity
- B. the $edgeHub module identity
- C. the leaf device identities
- D. the iothubowner policy credentials
- E. the leaf module identities
- F. the IoT Edge device identities
Answer: B,C,F
Explanation:
To get authorization to connect to IoT Hub, devices and services must send security tokens signed with either a shared access or symmetric key. These keys are stored with a device identity in the identity registry.
An IoT Hub identity registry can be accessed like a dictionary, by using the deviceId or moduleId as the key.
Reference:
https://docs.microsoft.com/bs-latn-ba/azure/iot-dps/how-to-control-access
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-identity-registry
NEW QUESTION 37
You have an Azure IoT Central application that includes a Device Provisioning Service instance.
You need to connect IoT devices to the application without first registering the devices.
In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.
Answer:
Explanation:
Explanation:
Step: With DPS (Device Provisioning Service) you can generate device credentials and configure the devices offline without registering the devices through IoT Central UI.
Connect devices that use SAS tokens without registering
1. Copy the IoT Central application's group primary key
2. Use the dps-keygen tool to generate the device SAS keys. Use the group primary key from the previous step. The device IDs must be lower-case:
dps-keygen -mk:<group primary key> -di:<device ID>
3. The OEM flashes each device with a device ID, a generated device SAS key, and the application ID scope value.
4. When you switch on a device, it first connects to DPS to retrieve its IoT Central registration information.
The device initially has a device status Unassociated on the Devices page and isn't assigned to a device template. On the Devices page, Migrate the device to the appropriate device template. Device provisioning is now complete, the device status is now Provisioned, and the device can start sending data.
On the Administration > Device connection page, the Auto approve option controls whether you need to manually approve the device before it can start sending data.
Reference:
https://docs.microsoft.com/en-us/azure/iot-central/core/concepts-get-connected
NEW QUESTION 38
You have an Azure IoT solution that includes multiple Azure IoT hubs in different geographic locations and a single Device Provision Service instance.
You need to configure device enrollment to assign devices to the appropriate IoT hub based on the following requirements:
The registration ID of the device
The geographic location of the device
The load between the IoT hubs in the same geographic location must be balanced.
What should you use to assign the devices to the IoT hubs?
- A. Evenly weighted distribution
- B. Custom (Use Azure Function)
- C. Static configuration (via enrollment list only)
- D. Lowest latency
Answer: C
Explanation:
Set the Device Provisioning Service allocation policy
The allocation policy is a Device Provisioning Service setting that determines how devices are assigned to an IoT hub. There are three supported allocation policies:
Lowest latency: Devices are provisioned to an IoT hub based on the hub with the lowest latency to the device.
Evenly weighted distribution (default): Linked IoT hubs are equally likely to have devices provisioned to them. This is the default setting. If you are provisioning devices to only one IoT hub, you can keep this setting.
Static configuration via the enrollment list: Specification of the desired IoT hub in the enrollment list takes priority over the Device Provisioning Service-level allocation policy.
Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/tutorial-provision-multiple-hubs
NEW QUESTION 39
You are writing code to provision IoT devices by using the Device Provisioning Service.
Which two details from the Overview blade of the Device Provisioning Service are required to provision a new IoT client device? To answer, select the appropriate detail in the answer are a.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: ID Scope
In the Azure portal, select the Overview blade for your Device Provisioning service and copy the ID Scope value. The ID Scope is generated by the service and guarantees uniqueness. It is immutable and used to uniquely identify the registration IDs.
Box 2: Global device endpoint
The global_prov_uri variable, which allows the IoT Hub client registration API IoTHubClient_LL_CreateFromDeviceAuth to connect with the designated Device Provisioning Service instance.
Example code:
static const char* global_prov_uri = "global.azure-devices-provisioning.net"; static const char* id_scope = "[ID Scope]"; Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/tutorial-set-up-device
This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided.
To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other question on this case study.
At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next sections of the exam. After you begin a new section, you cannot return to this section.
NEW QUESTION 40
You enable Azure Security Center for IoT.
You need to onboard a device to Azure Security Center. What should you do?
- A. Add the azureiotsecurity module identity to the Azure IoT Hub device identity.
- B. Install an X.509 certificate on the hardware security module (HSM) of the device.
- C. Open incoming TCP port 8883 on the device.
- D. Modify the connection string of the device.
Answer: A
Explanation:
Use the following workflow to deploy and test your Azure Security Center for IoT security agents:
1. Enable Azure Security Center for IoT service to your IoT Hub
2. If your IoT Hub has no registered devices, Register a new device.
3. Create an azureiotsecurity security module for your devices.
Azure Security Center for IoT makes use of the module twin mechanism and maintains a security module twin named azureiotsecurity for each of your devices.
Note: To manually create a new azureiotsecurity module twin for a device use the following instructions:
1. In your IoT Hub, locate and select the device you wish to create a security module twin for.
2. Click on your device, and then on Add module identity.
3. In the Module Identity Name field, enter azureiotsecurity.
4. Click Save.
Reference:
https://docs.microsoft.com/en-us/azure/asc-for-iot/quickstart-create-security-twin
NEW QUESTION 41
......
Exam Dumps AZ-220 Practice Free Latest Microsoft Practice Tests: https://www.suretorrent.com/AZ-220-exam-guide-torrent.html
AZ-220 Exam Questions | Real AZ-220 Practice Dumps: https://drive.google.com/open?id=1748-Br1ot1J2RJVlZLcRuhvuc5qkpmw5