Correct Answer: Endorsement Key (EK) and Registration ID
TPM attestation requires the Endorsement Key (EK), which is uniquely burned into the TPM chip at manufacture time, and a Registration ID. Root/leaf certificates are used for X.509 ...
Correct Answer
Endorsement Key (EK) and Registration ID
Why This Answer Is Correct
TPM attestation requires the Endorsement Key (EK), which is uniquely burned into the TPM chip at manufacture time, and a Registration ID. Root/leaf certificates are used for X.509 attestation, and symmetric keys do not use TPM hardware.
This question evaluates your knowledge of Azure Device Provisioning Service — a core concept tested in Microsoft Certified: Azure IoT Developer Specialty (AZ-220). Understanding Azure Device Provisioning Service is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You are manufacturing IoT devices that will be shipped globally and deployed in customer environments. You do not know which IoT Hub the device should connect to at manufacture time. You need zero-touch provisioning at customer deployment. Which service enables this?
You are using Azure DPS with X.509 certificate attestation. You need to provision all devices from the same manufacturer into a specific IoT Hub, while devices from a different manufacturer go to a different IoT Hub. How should you configure DPS?
A device in your fleet was provisioned via DPS but needs to be moved to a different IoT Hub due to a regional migration. You want to reprovision the device without replacing its firmware. What is the correct DPS approach?
You are using DPS with TPM attestation. A device's TPM chip fails and must be replaced. The replacement TPM has a different endorsement key. You need to re-provision the device to the same IoT Hub and preserve its device ID and twin data. What steps are required?
You need to implement a dynamic allocation policy in DPS to assign devices to the nearest geographical IoT Hub based on a real-time lookup in a custom database. Which allocation policy should you configure?