Correct Answer: Create an enrollment group per manufacturer using the manufacturer's CA certificate, each with a different linked IoT Hub
Enrollment groups in DPS allow you to provision multiple devices that share a common CA certificate (per manufacturer). Each enrollment group can be configured with a specific link...
Correct Answer
Create an enrollment group per manufacturer using the manufacturer's CA certificate, each with a different linked IoT Hub
Why This Answer Is Correct
Enrollment groups in DPS allow you to provision multiple devices that share a common CA certificate (per manufacturer). Each enrollment group can be configured with a specific linked IoT Hub. Devices presenting certificates signed by Manufacturer A's CA are routed to Hub A, and Manufacturer B's devices to Hub B — automatically, at scale.
This question evaluates your knowledge of Azure Device Provisioning Service — a core concept tested in Microsoft Certified: Azure IoT Developer Specialty (AZ-220). Understanding Azure Device Provisioning Service is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You are manufacturing IoT devices that will be shipped globally and deployed in customer environments. You do not know which IoT Hub the device should connect to at manufacture time. You need zero-touch provisioning at customer deployment. Which service enables this?
A device in your fleet was provisioned via DPS but needs to be moved to a different IoT Hub due to a regional migration. You want to reprovision the device without replacing its firmware. What is the correct DPS approach?
You are using DPS with TPM attestation. A device's TPM chip fails and must be replaced. The replacement TPM has a different endorsement key. You need to re-provision the device to the same IoT Hub and preserve its device ID and twin data. What steps are required?
A developer is setting up an individual enrollment in Azure DPS using TPM attestation. What information must be obtained from the physical TPM chip on the device to register it?
You need to implement a dynamic allocation policy in DPS to assign devices to the nearest geographical IoT Hub based on a real-time lookup in a custom database. Which allocation policy should you configure?