Verifying a GnuPG signature | LinuC Level 1 102 Exam original practice question

1.10.3Basic

Check whether a received file's digital signature can be verified with the corresponding public key.

Which command is appropriate?

Hint 1: Focus on the key relationship

Identify who must decrypt the data, then distinguish confidentiality, authentication, and the direction of each key operation.

Hint 2: Key terms

Review the short definitions of SSH keys, forwarding directions, encryption, and signatures involved.

--verify: The GnuPG operation that checks a signature against its data.
Digital signature: Data created with a signer's private key and checked with the corresponding public key.
Public key: A key that can be distributed for signature verification or public-key encryption.
--decrypt: The GnuPG operation that recovers plaintext from ciphertext, not signature verification.
--export: The GnuPG operation that writes key material, not a signature check.
Integrity: The property that data has not changed since it was signed.

Detailed explanation

Correctgpg --verify file.sig file.txt

Correct. --verify checks the signature and the signed data.

Incorrectgpg --symmetric file.sig

Incorrect. --symmetric performs symmetric encryption.

Incorrectgpg --decrypt file.sig

Incorrect. Decryption is different from verifying authenticity.

Incorrectgpg --export file.sig

Incorrect. --export writes keys and does not verify signatures.

An example you can run in a temporary verification environment.

printf '%s\n' 'gpg --verify file.sig file.txt'

gpg --verify file.sig file.txt

Foundation review

A server identity key used by SSH clients to detect a changed endpoint.

A key pair used to authenticate a user to an SSH server.

An SSH tunnel that carries traffic between a local, remote, or dynamic endpoint.

Question IDKL-102-1164

EnvironmentGnuPGのコマンド役割確認

Last technical review2026-08-20

More practice in this area