Microsoft Defender for IoT has flagged anomalous communication patterns from one of your IoT Hub-connected devices. You need to investigate the device without disrupting the rest of your fleet. What is the fastest action to isolate the device?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Disable the device in the IoT Hub device registry to block all future connections

Disabling a device in the IoT Hub registry is the fastest, most targeted isolation action. It immediately blocks that device from connecting or sending messages to IoT Hub without ...

๐Ÿ“‹Part of Microsoft Certified: Azure IoT Developer Specialty (AZ-220) ยท Azure Certification Practice
Real Exam ScenarioIoT Security

Microsoft Defender for IoT has flagged anomalous communication patterns from one of your IoT Hub-connected devices. You need to investigate the device without disrupting the rest of your fleet. What is the fastest action to isolate the device?

โœ“ Correct Answer & ExplanationIoT Security

Correct Answer

Disable the device in the IoT Hub device registry to block all future connections

Why This Answer Is Correct

Disabling a device in the IoT Hub registry is the fastest, most targeted isolation action. It immediately blocks that device from connecting or sending messages to IoT Hub without deleting its registration (preserving its twin and history for investigation). Regenerating the primary key would affect all devices using that key.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of IoT Security โ€” a core concept tested in Microsoft Certified: Azure IoT Developer Specialty (AZ-220). Understanding IoT Security is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.