Home » Microsoft » AZ-220 » What should you do?
You enable Azure Security Center for IoT.
You need to onboard a device to Azure Security Center.
What should you do?
A. Add the azureiotsecurity module identity to the Azure IoT Hub device identity.
B. Open incoming TCP port 8883 on the device.
C. Modify the connection string of the device.
D. Install an X.509 certificate on the hardware security module (HSM) of the device.
Correct Answer: A
Explanation/Reference:
Explanation:
Use the following workflow to deploy and test your Azure Security Center for IoT security agents:
1. Enable Azure Security Center for IoT service to your IoT Hub
2. If your IoT Hub has no registered devices, Register a new device.
3. Create an azureiotsecurity security module for your devices.
Azure Security Center for IoT makes use of the module twin mechanism and maintains a security module twin named azureiotsecurity for each of your devices.
Note: To manually create a new azureiotsecurity module twin for a device use the following instructions:
1. In your IoT Hub, locate and select the device you wish to create a security module twin for.
2. Click on your device, and then on Add module identity.
3. In the Module Identity Name field, enter azureiotsecurity.
4. Click Save.
Reference:
https://docs.microsoft.com/en-us/azure/asc-for-iot/quickstart-create-security-twin
