Exam AZ-220 topic 6 question 24 discussion

Actual exam question from Microsoft's AZ-220

Question #: 24
Topic #: 6

HOTSPOT
-

You are planning a project that will use an Azure IoT hub.

You have two authentication certificates named Cert1 and Cert2. Cert1 is a CA signed certificate and Cert 2 is a leaf certificate.

You need to identify which certificates to use.

What should you identify? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by PreetDP900 at April 7, 2023, 2:34 a.m.

Comments

Submit Cancel

Badoic

2 years, 1 month ago

1. For authenticating the device to the IoT Hub, it is used the device certificate/leaf certificate *(here Cert2) that contains also the Device ID. “The device certificate (also called a leaf certificate) must have the subject name set to the device ID (CN=deviceId) that was used when registering the IoT device in Azure IoT Hub. This setting is required for authentication.” https://learn.microsoft.com/en-us/azure/iot-hub/iot-hub-x509ca-overview#register-the-x509-ca-certificate-to-iot-hub 2. The certificate uploaded on the IoT Hub is the CA certificate, here Cert 1. “Register your X.509 CA certificate to IoT Hub, which uses it to authenticate your devices during registration and connection. Registering the X.509 CA certificate is a two-step process that includes uploading the certificate file and then establishing proof of possession.” https://learn.microsoft.com/en-us/azure/iot-hub/iot-hub-x509ca-overview#register-the-x509-ca-certificate-to-iot-hub

upvoted 3 times

...

hotwheelsinsf

2 years, 2 months ago

Another case of blundering by the authors

upvoted 1 times

...

PreetDP900

2 years, 3 months ago

This question is repeated and answers are not matching with the previous one. Can someone please clarify the correct answer?

upvoted 1 times

...