Exam AZ-220 topic 7 question 13 discussion

Actual exam question from Microsoft's AZ-220

Question #: 13
Topic #: 7

You plan to deploy an Azure IoT hub. The solution must ensure that when connecting to the IoT hub, IoT devices can only authenticate by presenting a certificate that is encrypted with a 256-bit AES key and uses a SHA384 hash.

You need to configure the Azure Resource Manager (ARM) template to deploy the IoT hub.

Which property should you configure?

A. disableLocalAuth
B. authenticationType
C. minTlsVersion
D. authorizationPolicies

Show Suggested Answer

Suggested Answer: B 🗳️

by Jan91 at March 29, 2023, 4:08 p.m.

Comments

Submit Cancel

j_c_000

1 year, 11 months ago

I'm not sure there IS a correct answer to this question! authenticationType is only used for routing connections to other services. https://learn.microsoft.com/en-us/azure/templates/microsoft.devices/iothubs?pivots=deployment-language-bicep#sharedaccesssignatureauthorizationrule min TLS version 1.2 still allows the smaller keys IoT Hubs that are configured to accept only TLS 1.2 will also enforce the use of the following recommended cipher suites: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 https://learn.microsoft.com/en-us/azure/iot-hub/iot-hub-tls-support

upvoted 1 times

...

Jan91

2 years, 1 month ago

I would C. minTlsversion

upvoted 1 times

...

Exam AZ-220 All Questions

View all questions & answers for the AZ-220 exam

Exam AZ-220 topic 7 question 13 discussion

Comments

j_c_000

Jan91

SY0-701