010-160 · Question #103
What is the preferred source for the installation of new applications in a Linux based operating system?
The correct answer is C. The distribution's package repository. The distribution's official package repository is the preferred source for Linux software installation because it provides curated, signed, dependency-aware packages managed by the distribution maintainers.
Question
Options
- AThe vendor's version management system
- BA CD-ROM disk
- CThe distribution's package repository
- DThe vendor's website
- EA retail store
How the community answered
(65 responses)- B5% (3)
- C91% (59)
- D2% (1)
- E3% (2)
Why each option
The distribution's official package repository is the preferred source for Linux software installation because it provides curated, signed, dependency-aware packages managed by the distribution maintainers.
A vendor's version management system (e.g., a Git repository) provides source code rather than packaged binaries, so installing from it requires manual compilation and bypasses the distribution's dependency tracking and security verification.
CD-ROM installation media is outdated and static, containing only the package versions present at the time of pressing, and cannot provide the up-to-date software and security patches that a live repository delivers.
Linux distributions ship with package managers (such as apt, dnf, or pacman) that connect to official, curated repositories containing pre-compiled and digitally signed packages verified by the distribution team. Installing from the repository ensures that dependency resolution is handled automatically, package integrity is cryptographically confirmed, and security updates are delivered through the same unified mechanism. This approach is preferred over external sources because it maintains system consistency and reduces the risk of installing malware or incompatible software.
Downloading software directly from a vendor's website produces standalone binaries or archives that bypass the distribution's package manager, losing automatic dependency resolution, cryptographic signature verification, and integrated update support.
Retail stores do not sell Linux application software in a form that integrates with the distribution's package management system, and physical retail distribution is not a recognized model for Linux software deployment.
Concept tested: Linux package management and official distribution repositories
Source: https://www.debian.org/doc/manuals/debian-reference/ch02.en.html
Topics
Community Discussion
11
Prof. SaraMay 2, 2026The correct answer is C, the distribution's package repository. Your distro's repo gives you pre-tested, dependency-resolved packages that integrate cleanly with your system, whereas vendor websites, CDs, and retail media can introduce unresolved dependencies, outdated builds, or packages that conflict with your existing environment.
Yusuf A.Feb 15, 2026C is the correct answer here. The distribution's package repository is the go-to because the packages there have already been tested for compatibility with your specific distro, signed by trusted maintainers, and your package manager handles dependencies automatically so you are not chasing down missing libraries yourself. My senior showed me early on that grabbing stuff from a vendor website or CD introduces version mismatches and makes updates a headache since your package manager does not know about software installed outside the repo. Repos also let you update everything in one command, which is huge for keeping a system secure.
Wesley A.Feb 17, 2026The repo is definitely the right call, but worth knowing that some enterprise distros lock the repo to an older tested version, so if the exam question mentions needing the absolute latest vendor release, that changes the calculus.
Wesley A.Feb 6, 2026C is correct, though I'd push back slightly on "preferred" since in enterprise shops you sometimes have to pull from a vendor repo instead, but for general purposes the distro's package repository wins every time because it handles dependencies, security patches, and updates automatically. The trap on this one is A, which sounds official but vendor version management systems are a specific case, not the default answer the exam wants.
Yusuf A.Feb 8, 2026Good point on the vendor repo edge case, that is exactly the kind of real-world footnote that trips people up when they go from the exam to their first enterprise job.
Bao N.Feb 11, 2026I actually flagged A on my first pass because vendor version management systems sound official and controlled, but then I remembered the whole point of a distro is that the maintainers vet and integrate packages into a central repo so dependencies resolve cleanly and updates stay consistent. C is the move every time, the distribution's package repository is what commands like apt or dnf are pulling from and that is exactly what the exam is testing.
Mateus R.Feb 17, 2026Right, C is the answer, your distro repo keeps everything signed and dependency-aware.
Bao N.Feb 20, 2026Agreed, though if you ever need a version newer than what the distro ships, grabbing it from the official upstream repo with GPG verification is the next safest move over pulling a random third-party PPA.
Hiroshi T.Apr 27, 2026The distribution's package repository is the right call here, and the Linux Foundation's own documentation backs this up: distro repos give you packages that are built, tested, and signed for your specific distribution, so dependency resolution and security updates happen automatically through your package manager rather than being your problem to handle manually.
Prof. SaraApr 28, 2026Solid point, and worth adding for cert candidates: distro repos do lag upstream on version numbers, so when an exam objective calls out a specific feature tied to a recent release, you may need the vendor's own repo or a manual install, which is exactly why the CompTIA Linux+ and LFCS blueprints both test your ability to configure additional package sources alongside the defaults.
Ola B.May 5, 2026I'll be honest, I almost picked A because I kept thinking about pulling straight from the source, but that is not how Linux is designed to work. The whole point of a distro is that the maintainers have already vetted, tested, and packaged software to work with your specific system, so the distribution's package repository is always the first place you go before hunting around on vendor sites or digging out physical media.