Implementing Cisco Customer Experience Solutions — Question 2

Which CLI command verifies the authenticity and integrity of a downloaded ISO?

Answer options

• A. Openssl dgst -sha512 -keyform der -verify <public key.der> -signature <ISO image.iso.signature> <ISO Image>
• B. Openssl dst -sha256 -keyform der -verify <public key.der> -signature <ISO image.iso.signature> <ISO Image>
• C. Openssl dst -sha512 -keyform der -verify <public key.der> -signature <ISO image.iso.signature> <ISO Image>
• D. Openssl dgst -sha256 -keyform der -verify <public key.der> -signature <ISO image.iso.signature> <ISO Image>

Correct answer: D

Explanation

The correct answer is D because it uses the correct command 'dgst' along with the SHA-256 hashing algorithm, which is appropriate for verifying the integrity of downloaded files. Options A and C incorrectly use SHA-512, and option B has a typo with 'dst' instead of 'dgst', making them invalid for this purpose.