Microsoft AZ-220 시험

Question No : 1

You develop a custom Azure IoT Edge module named temperature-module.
You publish temperature-module to a private container registry named mycr.azurecr.io.
You need to build a deployment manifest for the IoT Edge device that will run temperature-module.
Which three container images should you define in the manifest? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

• A.mcr.microsoft.com/azureiotedge-simulated-temperature-sensor:1.0
• B.mcr.microsoft.com/azureiotedge-agent:1.0
• C.mcr.microsoft.com/iotedgedev:2.0
• D.mycr.azurecr.io/temperature-module:latest
• E.mcr.microsoft.com/azureiotedge-hub:1.0

답을 확인하기

정답:
Explanation:
Each IoT Edge device runs at least two modules: $edgeAgent and $edgeHub, which are part of the IoT Edge runtime. IoT Edge device can run multiple additional modules for any number of processes. Use a deployment manifest to tell your device which modules to install and how to configure them to work together.
Reference: https://docs.microsoft.com/en-us/azure/iot-edge/module-composition

Question No : 2

You have an Azure IoT solution that includes an Azure IoT hub and 100 Azure IoT Edge devices.
You plan to deploy the IoT Edge devices to external networks. The firewalls of the external networks only allow traffic on port 80 and port 443.
You need to ensure that the devices can connect to the IoT hub. The solution must minimize costs.
What should you do?

• A.Configure the upstream protocol of the devices to use MQTT over TC
• B.Configure the upstream protocol of the devices to use AMQP over WebSocket.
• C.Connect the external networks to the loT solution by using ExpressRoute.
• D.Integrate cellular communication hardware onto the devices and avoid the use of the external networks.

답을 확인하기

정답:
Explanation:
AMQP over WebSockets uses port 443.
Reference: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-protocols

Question No : 3

You have an Azure IoT hub that uses a Device Provisioning Service instance.
You create a new individual device enrollment that uses symmetric key attestation.
Which detail from the enrollment is required to auto provision the device by using the Device Provisioning Service?

• A.the registration ID of the enrollment
• B.the primary key of the enrollment
• C.the device identity of the IoT hub
• D.the hostname of the IoT hub

답을 확인하기

정답:
Explanation:
An enrollment is the record of devices or groups of devices that may register through auto-provisioning. The enrollment record contains information about the device or group of devices, including:
the attestation mechanism used by the device
the optional initial desired configuration desired IoT hub the desired device ID
Note: Azure IoT auto-provisioning can be broken into three phases:

Question No : 4

HOTSPOT
You need to configure Azure IoT Edge module routing to ensure that modules route traffic as shown in the following exhibit.



How should you complete the IoT Edge module routes? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

답을 확인하기

정답:


Explanation:
Text, letter
Description automatically generated
Box 1: $connectionModuled
Add a route that tells the edge hub to route any message received by the IoT Edge device that was not sent by an IoT Edge module.
Box 2: $upstream
Send messages to $upstream, which passes the messages to the connected IoT Hub.

Question No : 5

You have an Azure IoT Edge device.
You need to modify the credentials used to access the container registry .
What should you modify?

• A.the @edgeHub module twin
• B.the IoT Edge module
• C.the $edgeAgent module twin
• D.the Azure IoT Hub device twin

답을 확인하기

정답:
Explanation:
The module twin for the IoT Edge agent is called $edgeAgent and coordinates the communications between the IoT Edge agent running on a device and IoT Hub. The desired properties are set when applying a deployment manifest on a specific device as part of a single-device or at-scale deployment.
These properties include: runtime.settings.registryCredentials.{registryId}.username runtime.settings.registryCredentials.registryId}.password
Reference: https://docs.microsoft.com/en-us/azure/iot-edge/module-edgeagent-edgehub

Question No : 6

You have an IoT device that gathers data in a CSV file named Sensors.csv.
You deploy an Azure IoT hub that is accessible at ContosoHub.azure-devices.net. You need to ensure that Sensors.csv is uploaded to the IoT hub.
Which two actions should you perform? Each correct answer presents part of the solution.

• A.Upload Sensors.csv by using the IoT Hub REST AP
• B.From the Azure subscription, select the IoT hub, select Message routing, and then configure a route to storage.
• C.From the Azure subscription, select the IoT hub, select File upload, and then configure a storage container.
• D.Configure the device to use a GET request to ContosoHub.azure-devices.net/devices/ContosoDevice1/ files/notifications.

답을 확인하기

정답:
Explanation:
C: To use the file upload functionality in IoT Hub, you must first associate an Azure Storage account with your hub. Select File upload to display a list of file upload properties for the IoT hub that is being modified.
For Storage container: Use the Azure portal to select a blob container in an Azure Storage account in your current Azure subscription to associate with your IoT Hub. If necessary, you can create an Azure Storage account on the Storage accounts blade and blob container on the Containers
A: IoT Hub has an endpoint specifically for devices to request a SAS URI for storage to upload a file. To start the file upload process, the device sends a POST request to {iot hub}.azure-devices.net/devices/{deviceId}/ files with the following JSON body:
{
"blobName": "{name of the file for which a SAS URI will be generated}"
}
Reference: https://github.com/MicrosoftDocs/azure-docs/blob/master/articles/iot-hub/iot-hub-configure-file-upload.md

Question No : 7

DRAG DROP
You have an Azure IoT Edge device named Edge1.
You need to configure the module container to link the module storage to the host storage.
How should you configure the deployment manifest? To answer, drag the appropriate keys to the correct targets. Each key may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

답을 확인하기

정답:


Explanation:
Graphical user interface, text, application, Word, email
Description automatically generated
Box 1: createOptions
Every module has a settings property that contains the module image, an address for the container image in a container registry, and any createOptions to configure the image on startup.
Box 2: portbindings
Use the PortBindings setting in the HostConfig group of the Docker container create options to map the exposed port in the module to a port on the host device.
For example, if you exposed port 8080 inside the module and want to map that to port 80 of the host device, the create options in the template.json file would look like the following example:
"createOptions": {
"HostConfig": {
"PortBindings": {
"8080/tcp": [
{
"HostPort": "80"
}
]
}
}
}

Question No : 8

You have 10 IoT devices that connect to an Azure IoT hub named Hub1.
From Azure Cloud Shell, you run az iot hub monitor-events --hub-name Hub1 and receive the following error message: "az iot hub: 'monitor-events' is not in the 'az iot hub' command group. See 'az iot hub --help'."
You need to ensure that you can run the command successfully .
What should you run first?

• A.az iot hub monitor-feedback --hub-name Hub1
• B.az iot hub generate-sas-token --hub-name Hub1
• C.az iot hub configuration list --hub-name Hub1
• D.az extension add -name azure-cli-iot-ext

답을 확인하기

정답:
Explanation:
Execute az extension add --name azure-cli-iot-ext once and try again.
In order to read the telemetry from your hub by CLI, you have to enable IoT Extension with the following commands:
Add: az extension add --name azure-cli-iot-ext
Reference: https://github.com/MicrosoftDocs/azure-docs/issues/20843

Question No : 9

You are troubleshooting an Azure IoT hub.
You discover that some telemetry messages are dropped before they reach downstream processing. You suspect that IoT Hub throttling is the root cause.
Which log in the Diagnostics settings of the IoT hub should you use to capture the throttling error events?

• A.Routes
• B.DeviceTelemetry
• C.Connections
• D.C2DCommands

답을 확인하기

정답:
Explanation:
The device telemetry category tracks errors that occur at the IoT hub and are related to the telemetry pipeline. This category includes errors that occur when sending telemetry events (such as throttling) and receiving telemetry events (such as unauthorized reader). This category cannot catch errors caused by code running on the device itself.
Note: The metric d2c.telemetry.ingress.sendThrottle is the number of throttling errors due to device throughput throttles.
Reference: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-monitor-resource-health

Question No : 10

You have an existing Azure IoT hub.
You need to connect physical IoT devices to the IoT hub.
You are connecting the devices through a firewall that allows only port 443 and port 80.
Which three communication protocols can you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

• A.MQTT over WebSocket
• B.AMQP
• C.AMQP over WebSocket
• D.MQTT
• E.HTTPS

답을 확인하기

정답:
Explanation:
MQTT over WebSockets, AMQP over WebSocket, and HTTPS use port 443.
Reference: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-devguide-protocols

Question No : 11

From the Device Provisioning Service, you create an enrollment as shown in the exhibit. (Click the Exhibit tab.)



You need to deploy a new IoT device.
What should you use as the device identity during attestation?

• A.a self-signed
• B.509 certificate
• C.the random string of alphanumeric characters
• D.the HMACSHA256 hash of the device's registration ID
• E.the endorsement key of the device's Trusted Platform Module (TPM)

답을 확인하기

정답:
Explanation:
Each device uses its derived device key with your unique registration ID to perform symmetric key attestation with the enrollment during provisioning. To generate the device key, use the key you copied from your DPS enrollment to compute an HMAC-SHA256 of the unique registration ID for the device and convert the result into Base64 format.
Reference: https://docs.microsoft.com/en-us/azure/iot-edge/how-to-auto-provision-symmetric-keys

Question No : 12

You have an Azure IoT hub that uses a Device Provisioning Service instance.
You have 1,000 legacy IoT devices that only support MAC address or serial number
identities. The device do NOT have a security feature that can be used to securely identify the device or a hardware security module (HSM).
You plan to deploy the devices to a secure environment.
You need to configure the Device Provisioning Service instance to ensure that all the devices are identified securely before they receive updates.
Which attestation mechanism should you choose?

• A.Trusted Platform Module (TPM) 1.2 attestation
• B.symmetric key attestation
• C.509 certificates

답을 확인하기

정답:
Explanation:
A common problem with many legacy devices is that they often have an identity that is composed of a single piece of information. This identity information is usually a MAC address or a serial number. Legacy devices may not have a certificate, TPM, or any other security feature that can be used to securely identify the device. The Device Provisioning Service for IoT hub includes symmetric key attestation. Symmetric key attestation can be used to identify a device based off information like the MAC address or a serial number.
Reference: https://docs.microsoft.com/bs-latn-ba/azure/iot-dps/how-to-legacy-device-symm-key

Question No : 13

You have three Azure IoT hubs named Hub1, Hub2, and Hub3, a Device Provisioning Service instance, and an IoT device named Device1.
Each IoT hub is deployed to a separate Azure region. Device enrollment uses the Lowest latency allocation policy.
The Device Provisioning Service uses the Lowest latency allocation policy. Device1 is auto-provisioned to Hub1 by using the Device Provisioning Service. Device1 regularly moves between regions.
You need to ensure that Device1 always connects to the IoT hub that has the lowest latency .
What should you do?

• A.Configure device attestation that uses
• B.509 certificates.
• C.Implement device certificate rolling.
• D.Disenroll and reenroll Device1.
• E.Configure the re-provisioning policy.

답을 확인하기

정답:
Explanation:
Automated re-provisioning support.
Microsoft added first-class support for device re-provisioning which allows devices to be reassigned to a different IoT solution sometime after the initial solution assignment. Re-provisioning support is available in two options:
Factory reset, in which the device twin data for the new IoT hub is populated from the enrollment list instead of the old IoT hub. This is common for factory reset scenarios as well as leased device scenarios. Migration, in which device twin data is moved from the old IoT hub to the new IoT hub. This is common for scenarios in which a device is moving between geographies.
Reference: https://azure.microsoft.com/en-us/blog/new-year-newly-available-iot-hub-device-provisioning-service-features/

Question No : 14

HOTSPOT
You have the following device twin for the IoT device.



For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

답을 확인하기

정답:


Explanation:
Box1: Yes
Box 2: Yes
Fanspeed 73 is a reported property.
Box 3: No
The deviceID property is read only.

Question No : 15

You plan to deploy an Azure IoT hub.
The IoT hub must support the following:
✑ Three Azure IoT Edge devices 2,500 IoT devices
✑ Each IoT device will spend a 6 KB message every five seconds.
You need to size the IoT hub to support the devices. The solution must minimize costs .
What should you choose?

• A.one unit of the S1 tier
• B.one unit of the B2 tier
• C.one unit of the B1 tier
• D.one unit of the S3 tier

답을 확인하기

정답:
Explanation:
2500* 6 KB * 12 = 180,000 KB/minute = 180 MB/Minute.
B3, S3 can handle up to 814 MB/minute per unit.
Incorrect Answers:
A, C: B1, S1 can only handle up to 1111 KB/minute per unit B: B2, S2 can only handle up to 16 MB/minute per unit.
Reference: https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-scaling