Which keytool command lists certificates in the cacerts file?

Question

Options

• Akeytool -list -showinfo
• Bkeytool -list -keystore cacerts
• Ckeytool -list cacerts
• Dkeytool -list -alias

• B
  89% (32)
• C
  8% (3)
• D
  3% (1)

Explanation

keytool -list -keystore cacerts is correct because -list is the action flag and -keystore specifies which keystore file to operate on - together they list all certificate entries in the named keystore (cacerts is the JDK's default trust store).

Why the distractors fail:

• A (-showinfo) is not a valid keytool flag - it doesn't exist.
• C (keytool -list cacerts) treats cacerts as a positional argument, but keytool requires the -keystore flag to identify the file; this command will error or prompt for a different keystore.
• D (-alias) narrows the listing to a single named alias, so without specifying an actual alias value and a keystore, it neither lists all certificates nor targets the cacerts file.

Memory tip: Think of keytool flags as always coming in -verb -noun value pairs - -list (what to do) + -keystore cacerts (where to do it). Any option without a proper -keystore flag is missing the "where," and any made-up flag like -showinfo simply won't run.

No community discussion yet for this question.