117-202 Exam Guide: Verify the LPIC-2 Exam Before You Schedule
The label 117-202 does not match the current official LPIC-2 exam codes listed by Linux Professional Institute. The current LPIC-2 version is 4.5, using exam codes 201-450 and 202-450; the 202 exam validates advanced administration of network services and security in small- to medium-sized mixed networks. This guide helps you decide whether the catalogue entry refers to LPIC-2 exam 202, confirm the version and prerequisite, then build a focused study plan instead of preparing from an outdated or incorrectly labelled question source.
What does 117-202 refer to?
Treat 117-202 as a catalogue label that must be verified, not as an official current LPI exam code. LPI’s official certification path identifies LPIC-2 as exams 201 and 202, while the current version uses codes 201-450 and 202-450. Before paying for a voucher or booking a session, compare the provider’s description with LPI’s official LPIC-2 and objectives pages.
The official LPIC-2 overview says that the certification requires passing both exams 201 and 202 and holding an active LPIC-1 certification. That means a resource labelled only 117-202 cannot, by itself, establish that it covers the correct exam. Check whether its topic list matches the official Exam 202 objectives and whether it identifies version 4.5 or exam code 202-450.
A reliable next action is to open the official objectives page, search for the Exam 202 section, and compare each topic and objective number with the material you intend to use. If the catalogue page uses 117-202 but the contents clearly identify LPIC-2 Exam 202, use the official LPI terminology when researching and scheduling. If the contents do not match, stop and ask the seller for clarification rather than relying on the label.
Who should take the LPIC-2 Exam 202?
Exam 202 is intended for Linux administrators who need to operate network services and security controls across small to medium-sized mixed networks. It is a sensible target after LPIC-1 when your work or planned role includes DNS, web hosting, file sharing, authentication, mail, firewalling, VPNs, or related service troubleshooting.
LPIC-2 is not an entry-level Linux credential. LPI requires an active LPIC-1 certification to receive LPIC-2, and the certification itself requires passing both Exam 201 and Exam 202. Confirm that status before making a study schedule: passing Exam 202 alone does not produce the LPIC-2 certification.
The exam can suit candidates who already administer Linux servers, but practical familiarity should not replace objective-by-objective study. Daily exposure to Apache, Samba, or SSH may leave gaps in LDAP, DNS zone maintenance, mail delivery, or FTP. Conversely, a candidate who has studied commands from a book but has never connected services together should add hands-on configuration and troubleshooting practice.
Use the decision below to choose your route: if LPIC-1 is active and you have service administration experience, begin with a diagnostic review of all Exam 202 objectives; if LPIC-1 is active but service experience is limited, study the objectives in service groups and build a lab; if LPIC-1 is not active, plan for the LPIC-1 requirement before treating Exam 202 as the final certification step.
What skills does Exam 202 measure?
The official Exam 202 objectives cover six connected areas: Domain Name Server, Web Services, File Sharing, Network Client Management, E-Mail Services, and System Security. The exam is therefore broader than a single web-server or security test. Preparation should show that you can select, configure, secure, and diagnose several services in a Linux network.
The objective weights indicate relative importance, and LPI states that objectives with higher weights are covered by more questions. Use the weights to order revision, but do not treat a lower-weight objective as optional. Each objective remains part of the published scope, and a narrow study plan can fail when it ignores unfamiliar service families.
The official outline includes the following Exam 202 objectives and weights: 207.1 Basic DNS server configuration has weight 3, 207.2 Create and maintain DNS zones has weight 3, and 207.3 Securing a DNS server has weight 2. For web services, 208.1 Basic Apache configuration has weight 4, 208.2 Apache configuration has weight 3, 208.3 Implementing HTTPS has weight 3, 208.4 Implementing Nginx as a web server and a reverse proxy has weight 2, and the Squid objective has weight 2.
File sharing includes 209.1 Samba Server Configuration with weight 5 and 209.2 NFS Server Configuration with weight 3. Network Client Management includes 210.1 DHCP configuration with weight 2, 210.2 PAM authentication with weight 3, 210.3 LDAP client usage with weight 2, and 210.4 Configuring an OpenLDAP server with weight 4. E-Mail Services includes 211.1 Using e-mail servers with weight 4, 211.2 Managing E-Mail Delivery with weight 2, and 211.3 Managing Mailbox Access with weight 2.
System Security includes 212.1 Configuring a router with weight 3, 212.2 Managing FTP servers with weight 2, 212.3 Secure shell (SSH) with weight 4, 212.4 security-related tools and awareness with weight 2, and 212.5 OpenVPN with weight 2. Verify the exact wording and complete list against the current objectives before studying, because the objectives page is the controlling scope for the current version.
Which topics deserve the earliest study time?
Start with the highest-weight objectives that also connect to several other topics: Samba, DNS, Apache, SSH, OpenLDAP, and e-mail-server administration. Then cover the medium-weight configuration and security objectives. This sequence gives you a working foundation while leaving time to close smaller gaps such as Squid, FTP, DHCP, and OpenVPN.
Weight 5 is assigned to 209.1 Samba Server Configuration, so learn the relationship between Samba daemons, configuration files, shares, authentication choices, Windows-to-Linux name mapping, and diagnostic tools. The published utility list includes smbd, nmbd, winbindd, testparm, smbstatus, smbclient, mount.cifs, and samba-tool. Do not memorize names in isolation; practise tracing a failed share from configuration validation to client access and logs.
Weight 4 is assigned to 207.1 Basic Apache configuration, 210.4 Configuring an OpenLDAP server, 211.1 Using e-mail servers, and 212.3 Secure shell (SSH). For each, create a short operational checklist: installation assumptions, primary configuration location, service control, syntax or configuration validation, access control, logging, and a basic client test. This format is more useful than a long unstructured command list.
DNS and web services should be studied together with name resolution and transport security. A web service that works by address but not by hostname points toward DNS; a service that resolves correctly but fails securely points toward HTTPS, certificates, or access policy. The objective list includes BIND 9 configuration, forward and reverse zones, DNSSEC awareness, Apache, HTTPS, Nginx reverse proxying, and Squid access controls.
Treat lower-weight topics as targeted maintenance, not as a reason to skip them. Build a one-page reference for DHCP configuration and leases, PAM files and modules, LDAP queries and LDIF operations, Dovecot, Postfix, FTP modes, firewall rules, and OpenVPN concepts. The page should record what each tool changes, where configuration is stored, and which command or log confirms success.
How should you build a hands-on lab?
Use an isolated Linux lab with at least a server and a client, then add service roles gradually. The lab’s purpose is not to reproduce live exam content; it is to make configuration relationships and failure diagnosis familiar. Keep snapshots or disposable systems so you can deliberately break a service and recover it.
Begin with a network plan: assign hostnames and addresses, decide which machine provides DNS, and record the names used by web, file, mail, and directory services. This lets you test dependencies rather than configuring disconnected examples. Keep a written change log containing the file edited, validation command, service restart or reload, client test, and observed log entry.
For DNS, practise authoritative and recursive caching-only concepts, forward and reverse zone files, configuration validation, zone validation, reloads, and queries with host or dig. Include an intentional error in a zone file and learn to distinguish a syntax failure from a delegation or client-resolution problem. The official objective list includes /etc/named.conf, /var/named/, rndc, named-checkconf, host, and dig.
For web services, configure a basic Apache site, then add virtual-host behaviour and HTTPS concepts. Build a separate Nginx reverse-proxy exercise and test the path from client to proxy to backend. For Squid, focus on the structure of ACL and http_access decisions. Record which layer is rejecting a request instead of changing multiple settings at once.
For file sharing, export an NFS filesystem with host or subnet restrictions and mount it from the client. Configure a Samba share, validate it with testparm, inspect status with smbstatus, and connect with smbclient or mount.cifs. Compare Unix permissions, share permissions, authentication, and name mapping; confusing those layers is a common source of incorrect troubleshooting.
For identity and mail, use small controlled datasets. Practise LDAP searches, password changes, additions, deletions, LDIF import and export, and basic access controls. Then follow an e-mail message through Postfix delivery, aliases, logs, and a Dovecot mailbox. Add PAM only after you understand the local authentication path, because an incorrect PAM change can lock out administrative access.
For security, practise SSH hardening decisions, packet forwarding, NAT, filtering rules, FTP modes, and the purpose of a VPN. Test allowed and blocked traffic from the client. Save a known-good firewall configuration and write the recovery procedure before experimenting. Never use a remote production host for a first attempt at firewall, PAM, SSH, or routing changes.
What is a practical study roadmap?
A useful roadmap has four passes: scope, build, troubleshoot, and verify. The first pass identifies gaps from the official objectives; the second turns each service into a working lab task; the third uses controlled failures to develop diagnosis; and the fourth checks recall under time pressure. Adjust the calendar to your background rather than assigning an unsupported fixed duration.
Pass one: create an objective matrix. Put every Exam 202 objective in a row and add columns for explain, configure, validate, troubleshoot, and recall. Mark each item as unknown, familiar, or demonstrated. Give priority to higher-weight objectives, but reserve review time for every published objective. This matrix becomes the basis for deciding whether you are ready to schedule.
Pass two: establish core service patterns. Study DNS, Apache, Samba, NFS, SSH, LDAP, mail, and firewalling as complete workflows. For each workflow, answer five questions: what problem does the service solve, which configuration controls it, how is the configuration checked, how is the service observed, and how does a client prove that it works? Write the answers in your own words after using the lab.
Pass three: practise troubleshooting rather than repeating successful installation. Stop a daemon, introduce a permission error, alter a hostname, use an incorrect address, break a configuration directive, and change one access rule at a time. Then identify the evidence needed to isolate the fault. Include logs, status output, configuration-test commands, client-side errors, and network inspection tools where appropriate.
Pass four: use objective-based recall sessions. Cover the command or configuration name and explain its role without looking. Reconstruct a small configuration from requirements, then check it against documentation. When a practice question exposes a gap, return to the objective and lab task; do not simply memorize the answer. Unofficial question banks can contain stale or inaccurate material and should never replace the official objectives.
Finish with mixed review. A candidate who studies only one domain at a time can overlook interactions, such as DNS affecting web access, LDAP affecting authentication, or firewall rules affecting mail and file services. Rotate service families and explain the diagnostic order aloud or in writing. Schedule only when the matrix shows demonstrated ability in the important objectives and no completely unknown objective remains.
How do the exam questions and timing affect preparation?
Each LPIC-2 exam lasts 90 minutes and contains 60 multiple-choice and fill-in-the-blank questions. That format rewards precise terminology as well as operational understanding. Practise reading the requested output carefully, identifying whether a question asks for a file, utility, protocol, configuration action, or security consequence, and moving on when a question is consuming disproportionate time.
Use two modes during practice. In learning mode, investigate every wrong answer and connect it to an objective, command, or configuration concept. In simulation mode, answer without notes, mark uncertain items, and review only after completing the set. The purpose is to measure readiness and expose weak domains, not to predict real questions or reproduce them.
Fill-in-the-blank practice needs special care. Learn canonical command names, service names, configuration paths, protocol terms, and option spelling from the current objectives and authoritative documentation. Do not assume that a plausible synonym will be accepted. Multiple-choice practice should focus on why the correct option fits and why the alternatives do not.
Do not use dumps, leaked questions, or memorization claims as a substitute for preparation. They may violate exam rules, omit updated objectives, and leave you unable to configure or troubleshoot a real service. A better test of readiness is whether you can complete a small task, explain the security implication, and recover from a deliberately introduced fault.
What delivery options and requirements should you confirm?
LPI states that LPIC-2 exams are delivered by Pearson VUE at testing centres or online through OnVUE. The current overview lists test-centre languages as English, German, Japanese, and Brazilian Portuguese, while the online-testing page lists LPIC-2 online exams in English. Confirm availability in your location and language when scheduling because delivery choices can change.
For OnVUE, LPI says candidates need a quiet private location, a reliable computer with a camera, and a stable internet connection. The platform currently supports Windows and macOS, not Linux computers. A Linux administrator should therefore check the technical requirements before purchasing a voucher, especially if the intended testing computer runs Linux.
LPI’s stated scheduling sequence is to obtain an LPI ID, purchase an exam voucher, create a Pearson account separately from the LPI account, and schedule through Pearson VUE. The getting-started page also describes receiving a score report from Pearson VUE immediately following the exam. Follow the current Pearson VUE and LPI instructions for identification, system checks, policies, rescheduling, and local availability.
The LPIC-2 certification validity period is 5 years. This is a certification lifecycle detail, not a reason to rush into an exam based on an old catalogue listing. First verify that your planned attempt uses the current objective version and that your LPIC-1 status meets the certification requirement.
Which mistakes commonly derail preparation?
The most damaging mistake is studying the wrong exam or version. The official current codes are 201-450 and 202-450, whereas 117-202 appears only in the supplied catalogue context. Resolve that mismatch first. Other frequent problems are treating topic names as sufficient knowledge, ignoring low-weight objectives, practising only installation, and failing to test the client side of a service.
Mistake one is confusing LPIC-2 certification with passing Exam 202. LPIC-2 requires both exams 201 and 202 plus an active LPIC-1 certification. If you are planning the second exam, confirm that Exam 201 is also passed and that LPIC-1 is active before relying on the certification timeline.
Mistake two is allocating study time by personal comfort. A web administrator may over-study Apache and under-study LDAP or mail; a security-focused administrator may know firewall concepts but lack Samba and DNS practice. Use the official weights and your diagnostic matrix, not familiarity, to determine the next study block.
Mistake three is memorizing configuration fragments without understanding scope. For example, a Samba share, an NFS export, a PAM rule, a DNS zone, and a firewall rule each involve different clients, permissions, reload behaviour, and evidence. Write the intended result first, make one change, validate it, and document the failure path.
Mistake four is scheduling before checking delivery constraints. Online testing is not currently available on Linux computers according to LPI’s OnVUE information, and the language options differ between test centres and online delivery. Verify the device, language, location, and account details before committing to a session.
Mistake five is trusting an answer key more than the objective. When a practice explanation conflicts with the official objectives, current documentation, or a reproducible lab result, investigate the conflict. Do not turn an unexplained answer into a permanent flashcard.
How can you use official learning materials effectively?
LPI’s Learning Materials are free teaching materials for teachers and students, and LPI says they are continuously expanded and updated. They follow the current objectives, separate explanations from exercises and solutions, and divide objectives into lessons according to scope and weight. Use them as a structured base, then add lab work for services that require configuration and troubleshooting.
Read the relevant lesson before opening the lab, but do not postpone practical work until every paragraph feels familiar. After the lesson, write a short task from the objective: configure, validate, test from a client, and recover from one failure. Keep the solution hidden until you have recorded your reasoning.
Use the objective page as the authority for scope and the learning materials as a sequence for understanding. If the catalogue resource or a third-party practice set uses a different code, topic order, or version, map it to the official objective matrix before studying. This prevents a familiar-looking resource from quietly steering preparation away from Exam 202.
Revisit the learning materials during final review rather than collecting more resources. The final pass should answer unresolved questions, correct terminology, and reinforce exercises. More sources are not automatically better; a small set of current, objective-aligned material plus a functioning lab produces clearer evidence of readiness.
What should you do before booking?
Before booking, verify four things: the exact exam code, the objective version, the LPIC-1 prerequisite for certification, and the delivery conditions. Then use a short readiness review that tests configuration, explanation, and troubleshooting across all six Exam 202 domains. If any domain is untouched, postpone scheduling until you have a concrete remediation task.
Complete these actions in order:
1. Confirm with the provider whether 117-202 means LPI LPIC-2 Exam 202 and whether the material maps to current code 202-450.
2. Open the official Exam 202 objectives and build the objective matrix, recording every topic, objective, and weight.
3. Obtain or refresh an LPI ID and confirm your LPIC-1 status before planning LPIC-2 certification.
4. Build a disposable two-host lab and practise DNS, web services, file sharing, identity, mail, and security workflows.
5. Take mixed, closed-book practice sessions using the official exam structure as a pacing reference, without using dumps or leaked material.
6. Check Pearson VUE and LPI delivery requirements, language availability, operating-system support, and local scheduling options.
7. Schedule only after your review identifies no unstudied objective and your lab notes show that you can validate and troubleshoot the major services.
How should you interpret the result and plan beyond it?
A result should guide the next technical step, not replace practical development. If you pass Exam 202, complete any remaining LPIC-2 requirement and keep practising the services that support your target role. If you do not pass, return to the objective matrix and rebuild weak domains through labs and targeted review rather than restarting every topic indiscriminately.
The LPIC-2 overview describes advanced system administration, storage and filesystems, networking and authentication, system security, and fundamental network services across the two exams. Exam 202 is strongest when connected to Exam 201 knowledge: capacity and network diagnosis, system maintenance, boot and filesystem behaviour, and service security often meet in real administration tasks.
Keep your lab notes after the exam. They can become a personal operations reference for DNS changes, web deployment, share permissions, identity troubleshooting, mail flow, SSH access, and firewall recovery. Remove secrets and environment-specific credentials, and update procedures when the software or official objectives change.
Because LPI states that LPIC-2 is valid for 5 years and that objectives are updated on average every three years, record the certification version and renewal horizon in your professional plan. Check LPI’s current renewal information rather than assuming that an old exam code or study resource remains suitable indefinitely.
Conclusion
The safest way to prepare for the catalogue entry called 117-202 is to verify it against LPI’s official LPIC-2 Exam 202 information. Use the current code 202-450 and version 4.5 as the reference point, confirm the active LPIC-1 requirement, study all six domains according to their published weights, and prove knowledge through configuration and troubleshooting in an isolated lab. Only then should you choose Pearson VUE delivery and schedule the exam.
