You need to build enhanced security around your IoT infrastructure by using Azure Security Center’s Defender for IoT. You want to set up a security agent to collect and report high priority events every 5 minutes and you set the event PriorityConnectionCreate parameter to “High”. After configuring the agents, you deploy the module and you notice that the events are not collected as expected because the agent isn’t running. 
What can be the probable cause for the problem?

Answer options:

A.You added the agent configuration object to the twin of the azureiotsecurity module.
B.The configuration object does not match the IoT security schema
C.eventPriorityConnectionCreate is not a supported security event.
D.The configuration must be added to the properties.desired section of the module twin

Correct Answer: B
Option A is incorrect because the agent configuration object must be created within the twin of the azureiotsecurity module.
Option B is CORRECT because if the configuration object does not match the IoT security schema, the agent will not launch. Make sure to check your agent configuration against the schema.
Option C is incorrect because eventPriorityConnectionCreate is a valid and supported security event. It monitors TCP connections created to and from the device.
Option D is incorrect because properties related to Defender for IoT security agent must actually be located in the desired properties section of the module twin.
Diagram: 
<pre class="brush:java;"># valid configuration schema for the Defender for IoT security agent
...
"desired": {
"ms_iotn:urn_azureiot_Security_SecurityAgentConfiguration": {
"eventPriorityConnectionCreate": {
"value": "High"
}
}
}
# 
</pre>
References: 

https://docs.microsoft.com/en-us/azure/iot-edge/iot-edge-security-manager?view=iotedge-2018-06
https://docs.microsoft.com/en-us/azure/defender-for-iot/how-to-agent-configuration