You have 10,000 IoT devices that connect to an Azure IoT hub. The devices do not support over-the-air (OTA) updates.
You need to decommission 1,000 devices. The solution must prevent connections and autoenrollment for the decommissioned devices.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Update the connectionState device twin property on all the devices.

B. Blacklist the X.509 root certification authority (CA) certificate for the enrollment group.

C. Delete the enrollment entry for the devices.

D. Remove the identity certificate from the hardware security module (HSM) of the devices.

E. Delete the device identity from the device registry of the IoT hub.






 

Suggested Answer: CE

In general, deprovisioning a device involves two steps:
✑ Disenroll the device from your provisioning service, to prevent future auto-provisioning. Depending on whether you want to revoke access temporarily or permanently, you may want to either disable or delete an enrollment entry.
✑ Deregister the device from your IoT Hub, to prevent future communications and data transfer. Again, you can temporarily disable or permanently delete the device's entry in the identity registry for the IoT Hub where it was provisioned.
Reference:
https://docs.microsoft.com/en-us/azure/iot-dps/how-to-unprovision-devices

This question is in AZ-220 Microsoft Azure IoT Developer Exam
For getting Microsoft Certified: Azure IoT Developer Specialty Certificate





Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.