nerdexam
Microsoft

AZ-220 · Question #43

You have an Azure IoT hub that is being taken from prototype to production. You plan to connect IoT devices to the IoT hub. The devices have hardware security modules (HSMs). You need to use the…

The correct answer is D. An X.509 certificate signed by a root certification authority (CA). Purchase X.509 certificates from a root certificate authority (CA). This method is recommended for production environments. The hardware security module, or HSM, is used for secure, hardware-based storage of device secrets, and is the most secure form of secret storage. Both…

Implement security

Question

You have an Azure IoT hub that is being taken from prototype to production. You plan to connect IoT devices to the IoT hub. The devices have hardware security modules (HSMs). You need to use the most secure authentication method between the devices and the IoT hub. Company policy prohibits the use of internally generated certificates. Which authentication method should you use?

Options

  • Aan X.509 self-signed certificate
  • Ba certificate thumbprint
  • Ca symmetric key
  • DAn X.509 certificate signed by a root certification authority (CA).

How the community answered

(18 responses)
  • A
    6% (1)
  • B
    11% (2)
  • D
    83% (15)

Explanation

Purchase X.509 certificates from a root certificate authority (CA). This method is recommended for production environments. The hardware security module, or HSM, is used for secure, hardware-based storage of device secrets, and is the most secure form of secret storage. Both X.509 certificates and SAS tokens can be stored in the HSM https://docs.microsoft.com/en-us/azure/iot-dps/concepts-security

Topics

#X.509 certificates#CA authentication#device authentication#HSM

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-220 Practice