EX188 Registry And Security Practice Question
When configuring a secure private registry that uses a self-signed TLS certificate, a user receives an x509 certificate signed by an unknown authority error when pulling images. Where should the CA certificate file be placed on a RHEL system for system-wide trust?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
/etc/containers/certs.d/registry.example.com/ca.crt
Custom CA certificates for registries are placed in /etc/containers/certs.d/<registry-name>/ or /etc/docker/certs.d/.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
/etc/pki/ca-trust/source/anchors/registry.crt
Why it's wrong here
While system-wide trust can use ca-trust, Podman specifically utilizes /etc/containers/certs.d/ for registry TLS verification overrides.
- ✗
/usr/share/pki/trust/anchors/ca.crt
Why it's wrong here
This is not the correct directory structure for Podman registry trust.
- ✓
/etc/containers/certs.d/registry.example.com/ca.crt
Why this is correct
Podman looks in /etc/containers/certs.d/<registry> for TLS certificates (ca.crt, client.cert, client.key).
- ✗
~/.config/containers/certs.d/ca.crt
Why it's wrong here
Rootless cert paths are located under the user home directory ~/.config/containers/certs.d/ or ~/.local/etc/containers/certs.d/ depending on version, but the system path is /etc/containers/certs.d/.
About these practice questions
Courseiva writes every EX188 question from scratch — 296 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Red Hat exam blueprint
This EX188 practice question is part of Courseiva's free Red Hat certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the EX188 exam.