Microsoft Exam AZ-220 Topic 28 Question 8 Discussion

Actual exam question for Microsoft's AZ-220 exam

Question #: 8
Topic #: 28

[All AZ-220 Questions]

You have an Azure IoT hub that uses a Device Provision Service instance.

You plan to deploy 100 IoT devices.

You need to confirm the identity of the devices by using the Device Provision Service.

Which three device attestation mechanisms can you use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

AX.509 certificates

BTrusted Platform Module (TPM) 2.0

CTrusted Platform Module (TPM) 1.2

DSymmetric key

EDevice Identity Composition Engine (DICE)
D18912E1457D5D1DDCBD40AB3BF70D5D

X509 certificates based on the standard X.509 certificate authentication flow.
Trusted Platform Module (TPM) based on a nonce challenge, using the TPM 2.0 standard for keys to present a signed Shared Access Signature (SAS) token. This does not require a physical TPM on the device, but the service expects to attest using the endorsement key per the TPM spec.
Symmetric Key based on shared access signature (SAS) Security tokens, which include a hashed signature and an embedded expiration.

Show Suggested Answer

Suggested Answer: A, B, D

The Device Provisioning Service supports the following forms of attestation:

https://docs.microsoft.com/en-us/azure/iot-dps/concepts-service#attestation-mechanism

by Jesusa at May 08, 2022, 10:49 PM

Limited Time Offer

25%

Off

Get Premium AZ-220 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!