You have an Azure subscription that contains an Azure IoT hub and two Azure IoT Edge devices named Device1 and Device2. You need to ensure that the IoT hub only accepts connections from Device1 and…

Question

Options

• AAzure API Management
• BAzure Active Directory (Azure AD) Identity Protection
• CAzure Defender for IoT
• Dan IP filter

• A
  4% (1)
• B
  77% (20)
• C
  4% (1)
• D
  15% (4)

Explanation

You can use Azure Active Directory (Azure AD) to authenticate requests to Azure IoT Hub service APIs, like create device identity and invoke direct method. You can also use Azure role-based access control (Azure RBAC) to authorize those same service APIs. By using these technologies together, you can grant permissions to access IoT Hub service APIs to an Azure AD security principal. This security principal could be a user, group, or application service principal. Note: There are three different ways for controlling access to IoT Hub: Azure Active Directory (Azure AD) integration for service APIs. Azure provides identity-based authentication with AAD and fine-grained authorization with Azure role-based access control (Azure RBAC). Azure AD and RBAC integration is supported for IoT hub service APIs only. Shared access signatures lets you group permissions and grant them to applications using access keys and signed security tokens. Per-device security credentials. Each IoT Hub contains an identity registry For each device in this identity registry, you can configure security credentials that grant DeviceConnect permissions scoped to the that device's endpoints. https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-dev-guide-azure-ad-rbac

No community discussion yet for this question.