Exam AZ-220 topic 6 question 8 discussion

Actual exam question from Microsoft's AZ-220

Question #: 8
Topic #: 6

[All AZ-220 Questions]

You enable Azure Security Center for IoT.
You need to onboard a device to Azure Security Center.
What should you do?

A. Add the azureiotsecurity module identity to the Azure IoT Hub device identity.
B. Open incoming TCP port 8883 on the device.
C. Modify the connection string of the device.
D. Install an X.509 certificate on the hardware security module (HSM) of the device.

Show Suggested Answer

Suggested Answer: A 🗳️
Use the following workflow to deploy and test your Azure Security Center for IoT security agents:
1. Enable Azure Security Center for IoT service to your IoT Hub
2. If your IoT Hub has no registered devices, Register a new device.
3. Create an azureiotsecurity security module for your devices.
Azure Security Center for IoT makes use of the module twin mechanism and maintains a security module twin named azureiotsecurity for each of your devices.
Note: To manually create a new azureiotsecurity module twin for a device use the following instructions:
1. In your IoT Hub, locate and select the device you wish to create a security module twin for.
2. Click on your device, and then on Add module identity.
3. In the Module Identity Name field, enter azureiotsecurity.
4. Click Save.
Reference:
https://docs.microsoft.com/en-us/azure/asc-for-iot/quickstart-create-security-twin

by tita_tovenaar at June 29, 2021, 8:23 p.m.

Comments

Submit Cancel

tita_tovenaar

3 years, 11 months ago

correct. B, C and D are related to basic device creation/enrollment

upvoted 2 times

...