nerdexam
Microsoft

AZ-220 · Question #87

You have an Azure IoT hub that has a hostname of contoso-hub.azure-devices.net and an MCU- based IoT device named Device1. Device1 does NOT support Azure IoT SDKs. You plan to connect Device1 to the…

The correct answer is D. Add the DigiCert Baltimore Root Certificate to Device1. The connection to Azure IoT Hub with MQTT is secured using TLS. The Azure IoT Hub library requires the provisioning of the following certificates and a private key for a successful TLS connection: 1. Baltimore CyberTrust Root certificate - Server certificate, used to verify the…

Implement security

Question

You have an Azure IoT hub that has a hostname of contoso-hub.azure-devices.net and an MCU- based IoT device named Device1. Device1 does NOT support Azure IoT SDKs. You plan to connect Device1 to the IoT hub by using the Message Queuing Telemetry Transport (MQTT) protocol and to authenticate by using X.509 certificates. You need to ensure that Device1 can authenticate to the IoT hub. What should you do?

Options

  • ACreate an Azure key vault and enable the encryption of data at rest for the IoT hub by using a
  • BEnable a hardware security module (HSM) on Device1.
  • CFrom the Azure portal, create an IoT Hub Device Provisioning Service (DPS) instance and add a
  • DAdd the DigiCert Baltimore Root Certificate to Device1.

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    12% (4)
  • C
    3% (1)
  • D
    82% (27)

Explanation

The connection to Azure IoT Hub with MQTT is secured using TLS. The Azure IoT Hub library requires the provisioning of the following certificates and a private key for a successful TLS connection: 1. Baltimore CyberTrust Root certificate - Server certificate, used to verify the server's certificate while connecting. 2. Device certificate - generated by the procedures described in Creating Azure IoT Hub certificates , used by Azure IoT Hub to authenticate the device. 3. Private key of the device. https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/nrf/include/net/azure_iot_hub.ht

Topics

#X.509 certificates#MQTT authentication#DigiCert Baltimore#certificate chain

Community Discussion

No community discussion yet for this question.

Full AZ-220 Practice