nerdexam
Microsoft

AZ-220 · Question #63

You enable Azure Security Center for IoT. You need to onboard a device to Azure Security Center. What should you do?

The correct answer is A. Add the azureiotsecurity module identity to the Azure IoT Hub device identity. Use the following workflow to deploy and test your Azure Security Center for IoT security agents: 1. Enable Azure Security Center for IoT service to your IoT Hub 2. If your IoT Hub has no registered devices, Register a new device. 3. Create an azureiotsecurity security module…

Implement security

Question

You enable Azure Security Center for IoT. You need to onboard a device to Azure Security Center. What should you do?

Options

  • AAdd the azureiotsecurity module identity to the Azure IoT Hub device identity.
  • BOpen incoming TCP port 8883 on the device.
  • CModify the connection string of the device.
  • DInstall an X.509 certificate on the hardware security module (HSM) of the device.

How the community answered

(37 responses)
  • A
    70% (26)
  • B
    5% (2)
  • C
    8% (3)
  • D
    16% (6)

Explanation

Use the following workflow to deploy and test your Azure Security Center for IoT security agents: 1. Enable Azure Security Center for IoT service to your IoT Hub 2. If your IoT Hub has no registered devices, Register a new device. 3. Create an azureiotsecurity security module for your devices. Azure Security Center for IoT makes use of the module twin mechanism and maintains a security module twin named azureiotsecurity for each of your devices. Note: To manually create a new azureiotsecurity module twin for a device use the following 1. In your IoT Hub, locate and select the device you wish to create a security module twin for. 2. Click on your device, and then on Add module identity. 3. In the Module Identity Name field, enter azureiotsecurity. https://docs.microsoft.com/en-us/azure/asc-for-iot/quickstart-create-security-twin

Topics

#Defender for IoT#security module identity#device onboarding#azureiotsecurity

Community Discussion

No community discussion yet for this question.

Full AZ-220 Practice