You are configuring a new CentOS Stream 9 server. The htop utility you need is only available from the Extra Packages for Enterprise Linux (EPEL) project, which is not enabled on the system yet. Corporate policy states that any third-party repository you add must
use its own GPG signing key so that every package is verified,
remain available for future transactions without further manual edits, and
never disable GPG checking at any point.
Which command sequence BEST satisfies all of these requirements?
Installing the epel-release RPM that the Fedora project publishes is the method officially recommended by EPEL. The RPM drops an /etc/yum.repos.d/epel.repo file with gpgcheck=1 and a gpgkey= line that points to the project's public key, and it also places the key in /etc/pki/rpm-gpg/. Because the RPM itself is signed, dnf verifies the package before installing it, then automatically imports the key when the first EPEL package is installed. After that, the repository remains permanently configured and can be used in any future dnf transaction without further edits.
The other choices violate at least one policy objective:
Creating the repo by hand and setting gpgcheck=0 disables signature verification.
Using dnf --nogpgcheck either for the htop install or for the repository-release RPM turns off signature checking entirely.
Adding the repository with dnf config-manager but installing packages with --nogpgcheck likewise bypasses GPG validation.
Therefore, installing the signed epel-release RPM directly from the Fedora mirror without the --nogpgcheck flag is the only option that keeps GPG enforcement intact and leaves the repository correctly configured for later use.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the EPEL repository, and why is it needed?
Open an interactive chat with Bash
What is a GPG key, and how does it ensure package security?
Open an interactive chat with Bash
Why is installing the *epel-release* RPM the recommended method?
Open an interactive chat with Bash
CompTIA Linux+ XK0-006 (V8)
Services and User Management
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
IT & Cybersecurity Package Join Premium for Full Access