nerdexam
LPI

303-300 · Question #8

Which package management tools can be used to verify the integrity of installed files on a Linux system?

The correct answer is A. RPM and DPKG. RPM and DPKG are the low-level package managers that include built-in file integrity verification commands: rpm -V <package> checks files against checksums stored in the RPM database, and dpkg --verify <package> does the same using the dpkg database - both report mismatches in…

Host Security

Question

Which package management tools can be used to verify the integrity of installed files on a Linux system?

Options

  • ARPM and DPKG
  • BAPT and YUM
  • Cdpkg and aptitude
  • Dyum and zypper

How the community answered

(56 responses)
  • A
    88% (49)
  • B
    2% (1)
  • C
    7% (4)
  • D
    4% (2)

Explanation

RPM and DPKG are the low-level package managers that include built-in file integrity verification commands: rpm -V <package> checks files against checksums stored in the RPM database, and dpkg --verify <package> does the same using the dpkg database - both report mismatches in permissions, size, or checksums.

Option B (APT and YUM) are wrong because these are high-level front-ends that handle dependency resolution and downloading; they delegate the actual package-level operations to RPM and DPKG respectively and lack dedicated integrity-check commands.

Option C (dpkg and aptitude) is wrong because aptitude is another high-level front-end (like APT) for Debian systems, not a low-level tool with integrity verification.

Option D (yum and zypper) is wrong for the same reason - both are high-level package managers (yum for RHEL/CentOS, zypper for openSUSE) that rely on RPM underneath.

Memory tip: Think "low-level = verify" - RPM and DPKG are the foundational tools that own the package database, so they're the ones that can check files against it. The acronym RD (RPM + DPKG) matches the Red Hat and Debian families.

Topics

#Package Management#File Integrity Verification#RPM/DPKG#System Administration

Community Discussion

No community discussion yet for this question.

Full 303-300 Practice