202-400 Exam Guide: Legacy LPIC-2 Exam 202 Objectives, Study Plan, and Scheduling Decisions
Exam 202-400 belongs to the legacy LPIC-2 track and evaluates administration of the network services and security layer around Linux systems: DNS, web services, file sharing, client management, email, and system security. It is relevant mainly to candidates studying an older objective set or confirming historical certification records. The most important decision is whether your preparation should follow 202-400 or the current 202-450 objectives before you book an appointment, because the exam code and objective version determine what you should study.
Is 202-400 the exam you should schedule?
202-400 is an older LPIC-2 Exam 202 code, not the current Exam 202 code shown on LPI’s certification overview. Before purchasing a voucher or choosing study material, compare the code on your appointment page with the objectives you are using. If the available appointment is 202-450, prepare from the current 4.5 objectives rather than treating a legacy 202-400 outline as current.
What LPI currently lists
LPI’s current LPIC-2 overview identifies version 4.5 and exam codes 201-450 and 202-450. It also states that LPIC-2 requires passing exams 201 and 202 and holding an active LPIC-1 certification. Those requirements describe the current certification route; they do not establish that a 202-400 appointment remains available.
Why older references can be confusing
LPI’s FAQ explains that candidates may write different exam versions and have them count toward certification equally, while the legacy objectives page documents version 4.0.0. That does not make every historical code schedulable today. Use the official scheduling route and the current exam overview to confirm availability, code, and delivery channel before committing to a study plan.
What LPIC-2 Exam 202 validates
The legacy Exam 202 objective set is designed around administering the service and security functions of a small to medium-sized Linux site. It covers a mixed network with LAN services, an Internet gateway, and Internet-facing services, including DNS, DHCP, Samba, NFS, web servers, email, SSH, firewalling, and VPN connectivity.
The operational profile behind the objectives
The objectives expect more than isolated command recall. A candidate should be able to install, configure, maintain, secure, and troubleshoot services that work together. The documented role also includes supervising assistants and advising management on automation and purchases, so preparation should include configuration decisions, dependencies, logs, permissions, and failure diagnosis.
Who benefits from this objective set
This material best fits a Linux administrator, infrastructure technician, systems engineer, or support professional responsible for shared network services. It is also useful for someone completing the older LPIC-2 path, but candidates starting a new certification attempt should first establish whether the current 202-450 objectives have replaced the legacy material for their route.
How the legacy blueprint is organized
The legacy blueprint contains six service and security areas. Prioritize by official objective weight, then validate every topic with hands-on work. The heaviest area is File Sharing: Samba Server Configuration carries weight 5, while several service configuration and security objectives carry weight 4 or weight 3.
DNS and web services
Domain Name Server contains Basic DNS server configuration, weight 3; Create and maintain DNS zones, weight 3; and Securing a DNS server, weight 2. Web Services contains Basic Apache configuration, weight 4; Apache configuration for HTTPS, weight 3; Implementing Squid as a caching proxy, weight 2; and Implementing Nginx as a web server and a reverse proxy, weight 2.
File sharing and client management
File Sharing contains Samba Server Configuration, weight 5, and NFS Server Configuration, weight 3. Network Client Management contains DHCP configuration, weight 2; PAM authentication, weight 3; LDAP client usage, weight 2; and Configuring an OpenLDAP server, weight 4. Samba deserves early attention because its official objective weight is the highest in Exam 202.
Email and system security
E-Mail Services contains Using e-mail servers, weight 4; Managing Local E-Mail Delivery, weight 2; and Managing Remote E-Mail Delivery, weight 2. System Security contains Configuring a router, weight 3; Managing FTP servers, weight 2; Secure shell (SSH), weight 4; Security tasks, weight 3; and OpenVPN, weight 2.
What the weights should change in your schedule
Use weight 5 and weight 4 objectives as anchors, not as permission to ignore smaller objectives. A sensible sequence is DNS fundamentals, Apache and HTTPS, Samba, NFS, LDAP and PAM, email, then gateway and host security. Finish with Squid, Nginx, FTP, DHCP, and OpenVPN review while still testing every objective at least once.
Which skills need practical lab work?
Build a disposable Linux lab and make each service produce an observable result: a DNS query, a working virtual host, a mounted share, an LDAP lookup, a delivered message, an SSH connection, or a VPN tunnel. Reading configuration syntax alone is weak preparation because the objectives describe configuration and administration tasks.
DNS practice
Work with BIND 9 configuration files, zone files, resource records, forward and reverse zones, and query tools such as dig, nslookup, and host. Practice changing a zone, checking its syntax, reloading it, and diagnosing a client that receives an unexpected answer. Include the security objective’s non-root and chroot concepts, plus awareness of TSIG and DNSSEC tools.
Web server and proxy practice
For Apache, practice basic installation and configuration, virtual hosts, logs, and HTTPS-related configuration. For Squid, focus on ACL structure, access controls, and client authentication concepts. For Nginx, distinguish a basic web server from a reverse proxy and trace how a request moves between the client, proxy, and backend.
Samba and NFS practice
For Samba, use the objective utility list as a checklist: smbd, nmbd, smbstatus, testparm, smbpasswd, nmblookup, smbclient, net, and the relevant configuration and log locations. For NFS, practice exports, host and subnet restrictions, exportfs, showmount, nfsstat, mount options, rpcinfo, and the relationship between server and client configuration.
Identity and email practice
Separate local authentication, PAM, LDAP client operations, and OpenLDAP server administration in your notes. Know the purpose of /etc/pam.d/, nsswitch.conf, LDAP queries and updates, LDIF, slapd, slapadd, slapcat, slapindex, access controls, distinguished names, schemas, and attributes. For email, map aliases, quotas, virtual domains, local filtering, POP, IMAP, and their configuration and log locations.
Security practice
Practice the security objectives as controlled changes rather than memorized snippets. Trace NAT and IP masquerading, forwarding, port redirection, and iptables rules by source, destination, protocol, port, and address. Harden an SSH daemon, review FTP active and passive behavior, examine security alerts and logs, and configure an OpenVPN point-to-point or site-to-site connection in an isolated lab.
What should you memorize, and what should you understand?
Memorize names, locations, and command purposes only after you understand the service flow. Exam preparation should let you infer the right diagnostic step from a symptom: a failed lookup points toward DNS configuration or zone data; an inaccessible share points toward service state, permissions, export or share rules, and network reachability.
Create a service map
For every objective, record five items: the daemon or client, primary configuration files, validation command, important logs, and one common failure dependency. For example, a DNS entry is not enough; connect the zone file to BIND configuration, a query utility, reload behavior, and the client’s resolver path.
Use contrast tables
Contrast pairs that are easy to confuse: forward versus reverse DNS zones, Apache versus Nginx reverse proxy roles, Samba versus NFS access models, PAM versus LDAP responsibilities, local versus remote email delivery, active versus passive FTP, and NAT versus filtering. These comparisons turn a long utility list into operational decisions.
Treat utility lists as boundaries
The official objective pages provide partial lists of files, terms, and utilities. They are useful boundaries for revision, but a utility name is not a complete lesson. For each listed item, explain when it is used, what output confirms success, and what configuration or permission would make that output misleading.
A practical study roadmap for 202-400 material
Study in passes: establish the blueprint, build working configurations, troubleshoot deliberately, and then rehearse concise answers. Do not begin with random questions or a command glossary. Start by confirming the exam version, then use the official objectives to measure coverage and the free LPI learning materials for structured lessons and exercises.
Pass one: establish coverage
Make a checklist of Topics 207 through 212 and every numbered objective beneath them. Mark each item as unfamiliar, recognized, practiced, or explainable. Read the relevant LPI learning material and objective description, but keep the legacy/current distinction visible in your notes so you do not accidentally mix versions.
Pass two: build a service lab
Create small lab exercises in dependency order. Start with DNS because other network services depend on reliable naming, then add a web service, file sharing, identity, email, and security controls. Keep configurations in a version-controlled directory or clearly labeled snapshots. Record the change, expected result, observed result, and rollback method.
Pass three: troubleshoot from symptoms
Break each lab intentionally: use a wrong zone record, an invalid Apache directive, a restrictive Samba rule, an incorrect NFS export, a failed LDAP search base, a blocked email path, or an SSH policy mismatch. Diagnose with service status, configuration validators, logs, network inspection, and client-side tests. The point is to learn a sequence, not to collect broken commands.
Pass four: timed retrieval
Once every objective has a lab note, practice answering scenario prompts without opening documentation. Allocate extra review to Samba Server Configuration, Apache, OpenLDAP, email servers, SSH, and the weight 3 objectives. For fill-in responses, rehearse exact command and file names; for multiple-choice questions, eliminate options that belong to a different service layer or operating context.
Final review
In the final review period, stop adding unrelated technologies. Revisit your error log, configuration-file map, service dependencies, and objective checklist. Confirm the scheduled code and language, review the official delivery requirements if testing online, and prepare only permitted materials and equipment. Do not use leaked questions, dumps, or memorization claims as a substitute for competence.
Common preparation mistakes
Most avoidable errors come from studying the wrong version, learning commands without service context, and giving equal time to unequal objectives. Correct those problems before buying another resource. A short diagnostic lab often reveals a knowledge gap more reliably than passive rereading.
Mistake: treating 202-400 as current
The current LPI overview lists 202-450, while the legacy wiki page identifies its material as version 4.0.0 and an older objective set. Do not infer availability from a search result, a training product title, or a third-party page. Verify the official exam code and objectives shown for your appointment.
Mistake: overfocusing on syntax
A candidate may remember an option for exportfs or a directive in named.conf yet fail to explain the network, permission, daemon, or logging condition around it. Fix this by requiring every command in your notes to have a purpose, expected output, and recovery step.
Mistake: ignoring low-weight objectives
Weight 2 objectives are smaller, not optional. They can expose gaps in Squid, Nginx, DHCP, FTP, or OpenVPN while a candidate spends all study time on Samba. Give high-weight areas more repetitions, but reserve a defined review block for every remaining objective.
Mistake: confusing certification requirements with exam preparation
Passing Exam 202 alone does not by itself complete LPIC-2. LPI states that the certification requires exams 201 and 202 and an active LPIC-1 certification. Keep eligibility, exam-version selection, study readiness, and scheduling as separate decisions.
Exam format, scoring, language, and delivery
For the current LPIC-2 information, LPI describes each exam as 90 minutes with 60 multiple-choice and fill-in-the-blank questions, and reports a passing score of 500 on a scale from 200 to 800. Because 202-400 is a legacy code, confirm that the format and language shown by the official scheduling channel match the appointment you intend to take.
How to interpret the passing score
LPI explains that the number of correct answers needed to reach 500 depends on the exact combination and difficulty of questions. That is why a practice target based on a guessed percentage is unreliable. Use practice results to locate weak objectives and improve consistency instead of trying to reverse-engineer a guaranteed pass mark.
Online testing considerations
LPI offers LPIC-2 through Pearson VUE OnVUE, with online LPIC-2 exams listed in English. The OnVUE platform is available in English only, requires a quiet private location, a reliable computer with a camera, and a stable Internet connection, and currently supports Windows and macOS. Check the official Pearson VUE system requirements before scheduling online.
Test-center language and appointment checks
LPI lists English, German, Japanese, and Brazilian Portuguese for LPIC-2 exams at VUE test centers, while the current overview presents its own language and delivery details. Availability can depend on the channel. Confirm the exact language, code, location or online option, and appointment policy on the official LPI and Pearson VUE pages rather than relying on an archived objective page.
What to do next
Take three actions before continuing your preparation: verify the exam code, download the applicable official objectives, and run a short diagnostic across all six legacy Exam 202 areas. The result should tell you whether you need legacy review or current-version preparation, whether your LPIC-1 status meets the certification requirement, and which labs deserve the next study block.
A decision checklist
Confirm whether the provider offers 202-400 or 202-450. Confirm that your objective document matches that code. Check LPIC-2 eligibility, including active LPIC-1 status. Select a delivery channel and verify its language. Build a weighted checklist from the official objectives. Finally, schedule only after your lab results show that you can configure and troubleshoot each major service family.
A useful readiness test
Choose one task from DNS, web services, file sharing, client management, email, and security. For each, configure a minimal working service, validate it from a client, break one dependency, and restore it without copying an answer. If you cannot explain the failure path, keep studying that objective even if you can recognize its command names.
Conclusion
202-400 is best treated as a legacy LPIC-2 Exam 202 reference point, not as an automatically current scheduling target. Let the official appointment listing determine the code, and let the matching objective document determine your study scope. Build practical service labs, prioritize the official weights without skipping smaller domains, and use diagnostic results to decide when to schedule. That approach prepares you for the skills the blueprint describes without depending on unauthorized question collections or unsupported assumptions about exam availability.
