Exam AZ-220 topic 6 question 2 discussion

Actual exam question from Microsoft's AZ-220

Question #: 2
Topic #: 6

You have an Azure IoT hub that uses a Device Provisioning Service instance.

You have 1,000 legacy IoT devices that only support MAC address or serial number identities. The devices do NOT have a security feature that can be used to securely identify the device or a hardware security module (HSM).
You plan to deploy the devices to a secure environment.
You need to configure the Device Provisioning Service instance to ensure that all the devices are identified securely before they receive updates.
Which attestation mechanism should you choose?

A. Trusted Platform Module (TPM) 1.2 attestation
B. symmetric key attestation
C. X.509 certificates

Show Suggested Answer

Suggested Answer: B 🗳️
A common problem with many legacy devices is that they often have an identity that is composed of a single piece of information. This identity information is usually a MAC address or a serial number. Legacy devices may not have a certificate, TPM, or any other security feature that can be used to securely identify the device. The Device Provisioning Service for IoT hub includes symmetric key attestation. Symmetric key attestation can be used to identify a device based off information like the MAC address or a serial number.
Reference:
https://docs.microsoft.com/bs-latn-ba/azure/iot-dps/how-to-legacy-device-symm-key

by sballmer at Dec. 3, 2020, 5:38 p.m.

Comments

Submit Cancel

sballmer

Highly Voted 4 years, 5 months ago

ans is B: "Symmetric key attestation can be used to identify a device based off unique information like the MAC address or a serial number." from https://docs.microsoft.com/bs-latn-ba/azure/iot-dps/how-to-legacy-device-symm-key

upvoted 6 times

...

Exam AZ-220 All Questions

View all questions & answers for the AZ-220 exam

Exam AZ-220 topic 6 question 2 discussion

Comments

sballmer

SY0-701