Correct Answer: X.509 certificate authentication with a unique leaf certificate per device
X.509 leaf certificates give each device a unique, hardware-bound identity. If a device is compromised, only that device's certificate needs to be revoked (via CA or directly in Io...
Correct Answer
X.509 certificate authentication with a unique leaf certificate per device
Why This Answer Is Correct
X.509 leaf certificates give each device a unique, hardware-bound identity. If a device is compromised, only that device's certificate needs to be revoked (via CA or directly in IoT Hub), with no impact on other devices. Symmetric keys shared across devices mean revoking one key affects all devices using that key.
This question evaluates your knowledge of IoT Security — a core concept tested in Microsoft Certified: Azure IoT Developer Specialty (AZ-220). Understanding IoT Security is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Microsoft Defender for IoT has flagged anomalous communication patterns from one of your IoT Hub-connected devices. You need to investigate the device without disrupting the rest of your fleet. What is the fastest action to isolate the device?
You are provisioning a large fleet of low-cost sensors using DPS symmetric key attestation. What is the security best practice for managing the symmetric keys in the device firmware?
You are deploying security agents on Linux IoT devices to monitor process creations, active network connections, and login attempts for security auditing. Which Microsoft Defender for IoT component should you install?
You are designing a high-security IoT device and must ensure its private keys are never exposed in system memory or storage. Which hardware component should you integrate, and how does the Azure IoT SDK support it?