nerdexam
Microsoft

AZ-220 · Question #45

You have an Azure IoT hub that uses a Device Provisioning Service instance. You have 1,000 legacy IoT devices that only support MAC address or serial number identities. The device do NOT have a…

The correct answer is B. symmetric key attestation. A common problem with many legacy devices is that they often have an identity that is composed of a single piece of information. This identity information is usually a MAC address or a serial number. Legacy devices may not have a certificate, TPM, or any other security feature…

Provision and manage devices

Question

You have an Azure IoT hub that uses a Device Provisioning Service instance. You have 1,000 legacy IoT devices that only support MAC address or serial number identities. The device do NOT have a security feature that can be used to securely identify the device or a hardware security module (HSM). You plan to deploy the devices to a secure environment. You need to configure the Device Provisioning Service instance to ensure that all the devices are identified securely before they receive updates. Which attestation mechanism should you choose?

Options

  • ATrusted Platform Module (TPM) 1.2 attestation
  • Bsymmetric key attestation
  • CX.509 certificates

How the community answered

(43 responses)
  • A
    12% (5)
  • B
    81% (35)
  • C
    7% (3)

Explanation

A common problem with many legacy devices is that they often have an identity that is composed of a single piece of information. This identity information is usually a MAC address or a serial number. Legacy devices may not have a certificate, TPM, or any other security feature that can be used to securely identify the device. The Device Provisioning Service for IoT hub includes symmetric key attestation. Symmetric key attestation can be used to identify a device based off information like the MAC address or a serial number. https://docs.microsoft.com/bs-latn-ba/azure/iot-dps/how-to-legacy-device-symm-key

Topics

#Device Provisioning Service#symmetric key attestation#legacy devices#attestation mechanism

Community Discussion

No community discussion yet for this question.

Full AZ-220 Practice