AZ-220: Study Notes

Disclaimer: This is not my list entirely, I have taken references from others by searching on Internet

Implement the IoT Solution Infrastructure (15-20%)

Create and configure an IoT Hub

• Create an IoT Hub
• Register a device
  Create IoT Hub via Portal
  Create IoT Hub via PowerShell
  Create IoT Hub via CLI
• Configure a device twin
  Get Started with Device Twins (.Net)
• Configure IoT Hub tier and scaling
  IoT Hub Scaling

Build device messaging and communication

• Build messaging solutions by using SDKs (device and service)
  Understand and use Azure IoT Hub SDKs
• Implement device-to-cloud communication
  Message Routing - Device to Cloud messages
  Device-to-cloud communications guidance
• Implement cloud-to-device communication
  Send cloud-to-device messages from an IoT hub
  Cloud-to-device communications guidance
  Send messages from the cloud to your device with IoT Hub (.NET)
• Configure file upload for devices
  Upload files from your device to the cloud with IoT Hub (.NET)

Configure physical IoT devices

• Recommend an appropriate protocol based on device specifications
  Choose a communication protocol
• Configure device networking, topology, and connectivity
  IoT Hub support for virtual networks with Private Link and Managed Identity
  IoT Hub IP addresses

Provision and Manage Devices (20-25%)

Implement the Device Provisioning Service (DPS)

• Create a Device Provisioning Service
  Set up the IoT Hub Device Provisioning Service with the Azure portal
  Set up the IoT Hub Device Provisioning Service with Azure CLI
• Link an IoT Hub to the DPS
  Linked Hub
• Create a new enrollment in DPS
  Manage device enrollments with Azure Portal
  Manage device enrollments with Azure Device Provisioning Service SDKs
• Manage allocation policies by using Azure Functions
  How to use custom allocation policies

Manage the device lifecycle

• Provision a device by using DPS
  Auto-provisioning concepts
  Set up a device to provision using the Azure IoT Hub Device Provisioning Service
• Deprovision an autoenrollment
  How to deprovision devices that were previously auto-provisioned
• Decommission (disenroll) a device
  How to disenroll a device from Azure IoT Hub Device Provisioning Service

Manage IoT devices by using IoT Hub

• Manage devices list in the IoT Hub device registry
  Understand the identity registry in your IoT hub
• Modify device twin tags and properties
  Understand and use device twins in IoT Hub
• Trigger an action on a set of devices by using IoT Hub Jobs and Direct Methods
  Schedule jobs on multiple devices
• Set up Automatic Device Management of IoT devices at scale
  Automatic IoT device and module management using the Azure portal

Build a solution by using IoT Central

• Define a device type in Azure IoT Central
  Define a new IoT device type in your Azure IoT Central application
• Configure rules and actions in Azure IoT Central
  Configure rules and actions for your device in Azure IoT Central
• Define the operator view
  Customize the operator dashboard and manage devices in Azure IoT Central
• Add and manage devices from IoT Central
  Manage devices in your Azure IoT Central application
• Monitor devices
  Use Azure IoT Central to monitor your devices
• Custom and industry-focused application templates
  What are application templates?

Implement Edge (15-20%)

Set up and deploy an IoT Edge device

• Create a device identity in IoT Hub
  Register an Azure IoT Edge device
• Deploy a single IoT device to IoT Edge
  Deploy Azure IoT Edge modules from the Azure portal
  Deploy Azure IoT Edge modules with Azure CLI
  Deploy Azure IoT Edge modules from Visual Studio Code
  Deploy your first IoT Edge module to a virtual Windows device
• Create a deployment for IoT Edge devices
  Deploy IoT Edge modules at scale using the Azure portal
• Install container runtime on IoT devices
  Install the Azure IoT Edge runtime on Debian-based Linux systems
  Create and provision an IoT Edge device with a TPM on Linux
  Create and provision an IoT Edge device using symmetric key attestation
• Define and implement deployment manifest
  Learn how to deploy modules and establish routes in IoT Edge
• Update security daemon and runtime
  Update the IoT Edge security daemon and runtime
• Provision IoT Edge devices with DPS
  IoT Edge DPS demo
• IoT Edge automatic deployments
  Deploy IoT Edge modules at scale using the Azure portal
• Deploy on constrained devices
  Reduce memory space used by IoT Edge hub
• Secure IoT Edge solutions
  Security standards for Azure IoT Edge
  Azure IoT Edge security manager
• Deploy production certificates
  Understand how Azure IoT Edge uses certificates
  Install production certificates

Develop modules

• Create and configure an Edge module
  Develop your own IoT Edge modules Learn how to deploy modules and establish routes in IoT Edge
• Deploy a module to an Edge device
  Deploy IoT Edge module via Portal Deploy IoT Edge module via CLI Deploy IoT Edge module via VS Code
• Publish an IoT Edge module to an Azure Container Registry
  Develop IoT Edge modules for Windows devices Develop IoT Edge modules for Linux devices

Configure an IoT Edge device

• Select and deploy an appropriate gateway pattern
  How an IoT Edge device can be used as a gateway
  Configure an IoT Edge device to act as a transparent gateway
  Authenticate a downstream device to Azure IoT Hub
  Connect a downstream device to an Azure IoT Edge gateway
• Implement module-to-module communication
  Module communication
• Implement and configure offline support (including local storage)
  Understand extended offline capabilities for IoT Edge devices, modules, and child devices
  Give modules access to a device’s local storage

Process and manage data (15-20%)

Configure routing in Azure IoT Hub

• Implement message enrichment in IoT Hub
  Use Azure IoT Hub message enrichments
• Configure routing of IoT Device messages to endpoints
  Use the Azure CLI and Azure portal to configure IoT Hub message routing
  Part 2 - View the routed messages
• Define and test routing queries
  IoT Hub message routing query syntax
• Integrate with Event Grid
  React to IoT Hub events by using Event Grid to trigger actions

Configure stream processing

• Create ASA for data and stream processing of IoT data
  Process real-time IoT data streams with Azure Stream Analytics
• Process and filter IoT data by using Azure Functions
  Processing data from IoT Hub with Azure Functions
  Azure IoT Hub output binding for Azure Functions
  Azure IoT Hub bindings for Azure Functions
• Configure Stream Analytics outputs
  Outputs from Azure Stream Analytics
  Input and output

Configure an IoT solution for Time Series Insights (TSI)

• Implement solutions to handle telemetry and time-stamped data
  Time series solutions
• Create an Azure Time Series Insights (TSI) environment
  Create an Azure Time Series Insights Gen1 environment
• Connect the IoT Hub and the Time Series Insights (TSI)
  Add an IoT hub event source to your Azure Time Series Insight environment

Monitor, troubleshoot, and optimize IoT solutions (15-20%)

Configure health monitoring

• Configure metrics in IoT Hub
  Understand IoT Hub metrics
• Set up diagnostics logs for Azure IoT Hub
  Set up and use metrics and diagnostic logs with an IoT hub
• Query and visualize tracing by using Azure Monitor
  Query and visualize

Troubleshoot device communication

• Establish maintenance communication
  Use a simulated device to test connectivity with your IoT hub (might not be the best fit)
• Verify device telemetry is received by IoT Hub
  Send telemetry from a device to an IoT hub and read it with a back-end application (.NET)
• Validate device twin properties, tags and direct methods
  Understand and use device twins in IoT Hub
  Understand and invoke direct methods from IoT Hub
• Troubleshoot device disconnects and connects
  Monitor, diagnose, and troubleshoot disconnects with Azure IoT Hub

Perform end-to-end solution testing and diagnostics

• Estimate the capacity required for each service in the solution
  IoT Hub Scaling
• Conduct performance and stress testing
  Accelerating IoT solution
  Azure IoT Hub Stress Test

Implement security (15-20%)

Implement device authentication in the IoT Hub

• Choose an appropriate form of authentication
  IoT device authentication options
• Manage the X.509 certificates for a device
  Device Authentication using X.509 CA Certificates
• Manage the symmetric keys for a device
  Provision a simulated device with symmetric keys

Implement device security by using DPS

• Configure different attestation mechanisms with DPS
  Attestation mechanisms with DPS
• Generate and manage x.509 certificates for IoT Devices
  Device Authentication using X.509 CA Certificates
• Configure enrollment with x.509 certificates
  Enroll X.509 devices to the Device Provisioning Service using C#
• Generate a TPM endorsements key for a device
  TPM attestation
• Configure enrollment with symmetric keys
  How to provision legacy devices using symmetric keys

Implement Azure Security Center (ASC) for IoT

• Enable ASC for IoT in Azure IoT Hub
  Onboard Azure Security Center for IoT service in IoT Hub
• Create security modules
  Create an azureiotsecurity module twin
• Configure custom alerts
  Create custom alerts