nerdexam
Microsoft

AZ-220 · Question #31

You have an Azure IoT hub that uses a Device Provisioning Service instance to automate the deployment of Azure IoT Edge devices. The IoT Edge devices have a Trusted Platform Module (TPM) 2.0 chip…

The correct answer is D. the endorsement key and the registration ID. The TPM simulator's Registration ID and the Endorsement key, are used when you create an individual enrollment for your device. https://docs.microsoft.com/en-us/azure/iot-edge/how-to-auto-provision-simulated-device-linux

Provision and manage devices

Question

You have an Azure IoT hub that uses a Device Provisioning Service instance to automate the deployment of Azure IoT Edge devices. The IoT Edge devices have a Trusted Platform Module (TPM) 2.0 chip. From the Azure portal, you plan to add an individual enrollment to the Device Provisioning Service that will use the TPM of the IoT Edge devices as the attestation mechanism. Which detail should you obtain before you can create the enrollment.

Options

  • Athe scope ID and the Device Provisioning Service endpoint
  • Bthe primary key of the Device Provisioning Service shared access policy and the global device
  • Cthe X.509 device certificate and the certificate chain
  • Dthe endorsement key and the registration ID

How the community answered

(26 responses)
  • A
    8% (2)
  • B
    4% (1)
  • C
    4% (1)
  • D
    85% (22)

Explanation

The TPM simulator's Registration ID and the Endorsement key, are used when you create an individual enrollment for your device. https://docs.microsoft.com/en-us/azure/iot-edge/how-to-auto-provision-simulated-device-linux

Topics

#TPM attestation#Device Provisioning Service#endorsement key#individual enrollment

Community Discussion

No community discussion yet for this question.

Full AZ-220 Practice