Exam AZ-220 topic 6 question 25 discussion

Actual exam question from Microsoft's AZ-220

Question #: 25
Topic #: 6

You have an Azure IoT solution.

You need to implement multi-factor device authentication by using custom device authentication.

What should you do first?

A. Create an Azure Policy definition for Azure IoT Hub.
B. Enable multi-factor authentication (MFA) for Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra.
C. Create a service endpoint policy.
D. Deploy a security token service.

Show Suggested Answer

Suggested Answer: B 🗳️

by j_c_000 at May 30, 2023, 5:37 p.m.

Comments

Submit Cancel

j_c_000

2 years, 1 month ago

Selected Answer: C

https://learn.microsoft.com/en-us/azure/iot-hub/iot-hub-dev-guide-sas?tabs=node#create-a-token-service-to-integrate-existing-devices You can use the IoT Hub identity registry to configure per-device/module security credentials and access control using tokens. If an IoT solution already has a custom identity registry and/or authentication scheme, consider creating a token service to integrate this infrastructure with IoT Hub. In this way, you can use other IoT features in your solution. A token service is a custom cloud service. It uses an IoT Hub shared access policy with the DeviceConnect permission to create device-scoped or module-scoped tokens. These tokens enable a device and module to connect to your IoT hub.

upvoted 1 times

Tyrel

2 years ago

Should be D then...

upvoted 1 times

...