Correct Answer: Integrate a Hardware Security Module (HSM) or TPM, and use HSM-based security providers in the Azure IoT Device SDK
HSMs and TPMs provide secure storage for cryptographic keys and perform operations within their hardware boundary. The Azure IoT Device SDK has built-in security provider libraries...
Correct Answer
Integrate a Hardware Security Module (HSM) or TPM, and use HSM-based security providers in the Azure IoT Device SDK
Why This Answer Is Correct
HSMs and TPMs provide secure storage for cryptographic keys and perform operations within their hardware boundary. The Azure IoT Device SDK has built-in security provider libraries that interface with HSM/TPM chips, keeping the private key secure and unexposed.
This question evaluates your knowledge of IoT Security — a core concept tested in Microsoft Certified: Azure IoT Developer Specialty (AZ-220). Understanding IoT Security is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need to authenticate IoT devices to IoT Hub in a way that each device has a unique cryptographic credential and a compromised device credential can be revoked without affecting other devices. Which authentication method should you use?
Microsoft Defender for IoT has flagged anomalous communication patterns from one of your IoT Hub-connected devices. You need to investigate the device without disrupting the rest of your fleet. What is the fastest action to isolate the device?
You are provisioning a large fleet of low-cost sensors using DPS symmetric key attestation. What is the security best practice for managing the symmetric keys in the device firmware?
You are deploying security agents on Linux IoT devices to monitor process creations, active network connections, and login attempts for security auditing. Which Microsoft Defender for IoT component should you install?