117-202 Exam Guide: Verify the Code, Map the Objectives, and Prepare for LPIC-2 Exam 202
The label 117-202 does not match the official LPI identifiers supplied for this certification. LPI identifies the current LPIC-2 version as 4.5, with exam codes 201-450 and 202-450, and describes exam 202 as a test of Linux network-service administration. This guide helps an LPIC-1 holder decide whether the intended target is LPIC-2 exam 202, select the correct objective version, build hands-on practice around the measured domains, and schedule through an approved Pearson VUE route rather than relying on an unofficial code or question source.
Is 117-202 an official LPI exam code?
No official source in the supplied research identifies 117-202 as an LPI exam code. The official LPIC-2 pages identify the current certification version as 4.5 and list exam codes 201-450 and 202-450. Treat 117-202 as a possible catalogue, seller, or indexing label until LPI or Pearson VUE confirms what it represents.
The distinction matters before you buy a voucher or commit to a study plan. LPI’s official certification path lists LPIC-2 as exams 201 and 202, while the objectives page names the current objective version as 4.5 and the codes as 201-450 and 202-450. A page using 117-202 may be describing the same subject inaccurately, or it may refer to an older or unrelated catalogue entry.
Use the official LPIC-2 overview as the authority for the certification identity, then compare the code shown in your Pearson VUE account with the code on the official objectives page. If the two do not agree, pause the purchase and ask LPI or Pearson VUE to identify the exam. Do not assume that a practice product carrying 117-202 is aligned with the current blueprint.
What does LPIC-2 exam 202 validate?
LPIC-2 validates advanced Linux administration for small to medium-sized mixed networks. Exam 202 concentrates on the network services and security layer: DNS, HTTP services, file sharing, network client management, e-mail services, and system security. It is aimed at administrators who need to configure, secure, troubleshoot, and maintain services rather than merely recognize command names.
The official overview describes the broader LPIC-2 outcome as advanced system administration, fundamental network-service configuration, authentication, firewall and VPN work, and advice related to automation and purchases. Exam 202 is one half of that certification. Passing 202 alone does not produce LPIC-2 certification because LPI requires both exams 201 and 202, together with an active LPIC-1 certification.
The practical decision is whether your current experience matches service administration. If you have only used Linux as a desktop user, begin with LPIC-1-level command-line, networking, and service fundamentals. If you already maintain Linux hosts, focus on reproducing service configurations and explaining the security and troubleshooting consequences of each setting. The exam is vendor-neutral, so study the objective concepts and utilities instead of memorizing one distribution’s default layout.
Who should take exam 202 first?
An active LPIC-1 holder who wants to complete the second-level Linux Professional track is the clearest audience for exam 202. It also suits Linux administrators responsible for shared services across mixed networks, provided they are prepared to learn several service families rather than specialize in only web servers, only mail, or only identity management.
The active LPIC-1 requirement is official, not merely a study recommendation: LPI states that a candidate must have an active LPIC-1 certification to receive LPIC-2. The certification itself requires passing exams 201 and 202. Therefore, a candidate who has passed 202 but lacks an active LPIC-1 should not describe that result as completed LPIC-2 certification.
Before studying, write down your intended sequence. If exam 201 is still outstanding, decide whether to study both exams as one administration programme or finish 202 after 201. Exam 201 covers capacity planning, the kernel, startup, filesystems, advanced storage, networking configuration, and system maintenance; exam 202 covers the network services listed above. The two exams overlap in troubleshooting and administration habits, but they are separate objective sets.
Which domains and skills are measured?
The official exam 202 objectives are the study map. They require configuration and operational understanding across DNS, web services, file sharing, DHCP and authentication clients, e-mail, and system security. Use the objective descriptions to turn each topic into a lab task, a troubleshooting scenario, and a short explanation of why the configuration is safe and appropriate.
Domain Name Server includes BIND configuration, authoritative and recursive caching-only operation, forward and reverse zones, configuration validation, zone maintenance, TSIG, and awareness of DNSSEC and related tools. The listed utilities include named-checkconf, rndc, host, dig, dnssec-keygen, and dnssec-signzone. Practice distinguishing a syntax failure, a zone-data failure, and a client-resolution failure.
HTTP Services includes Apache configuration, HTTPS concepts, Squid access controls and authentication, and Nginx as a web server and reverse proxy. The objectives list Apache with a weight of 4, so Apache Basic Configuration is an especially important study area. Nginx as a web server and reverse proxy has a weight of 2; study it, but do not let it displace the higher-weight Apache work.
File Sharing includes Samba and NFS. Samba Server Configuration has a weight of 5, while NFS Server Configuration has a weight of 3. For Samba, learn the relationship among smbd, nmbd, winbindd, testparm, smbclient, smbpasswd, nmblookup, share definitions, name mapping, and security modes. For NFS, practise /etc/exports, exportfs, showmount, mount options, host or subnet restrictions, and the distinction between NFS versions.
Network Client Management includes DHCP configuration, PAM authentication, LDAP client use, and OpenLDAP server configuration. DHCP configuration has a weight of 2, PAM Authentication has a weight of 3, LDAP Client Usage has a weight of 2, and OpenLDAP Server Configuration has a weight of 4. The labels must stay attached to their domains: the weights are not interchangeable percentages and do not state a guaranteed question count.
E-Mail Services covers mail-server administration, delivery management, and mailbox access. Using E-Mail Servers has a weight of 4, while Managing E-Mail Delivery has a weight of 2 and Managing Mailbox Access has a weight of 2. Study Postfix configuration, aliases, quotas, virtual domains, SMTP and TLS basics, Dovecot IMAP and POP3, and Sieve filtering. Know where logs and service configuration files fit into diagnosis.
System Security includes router and NAT configuration, FTP servers, SSH, security testing and intrusion-detection awareness, and OpenVPN. Secure Shell has a weight of 4, Configuring a Router has a weight of 3, and OpenVPN has a weight of 2. The objectives also identify FTP Server Management with a weight of 2 and security-scanning and IDS knowledge. Practise applying least privilege and validating the resulting network path.
How should you use the objective weights?
Use weights to allocate attention, not to predict the exact exam. LPI says that higher-weighted objectives will be covered with more questions, but the weights are relative importance values. A sensible plan completes every objective, then gives additional lab and recall time to the higher-weight areas such as Samba, Apache, SSH, and the weight-4 identity and mail objectives.
Start by making a matrix with four columns: objective, configuration task, troubleshooting evidence, and confidence. Record the official domain and weight in the first column. For example, write “209.1 Samba Server Configuration — weight 5,” not simply “weight 5.” This prevents a common revision error in which an isolated number loses its meaning.
Do not convert weights into unsupported percentages. The official objectives assign weights to individual objectives, not a published percentage distribution for the whole exam. They also do not promise that a given command, product, or scenario will appear. Use the weights to decide what to revisit after a diagnostic test, while retaining at least one working exercise for every listed objective.
What is the most efficient preparation strategy?
Build from service dependencies to service-specific configuration. First refresh Linux networking, users, permissions, processes, logs, name resolution, and package or service management. Next practise one service at a time. Finally, combine services in scenarios such as a client receiving DHCP, resolving DNS, reaching an Nginx or Apache endpoint, mounting an NFS or Samba share, and authenticating through PAM or LDAP.
Use a disposable virtual lab or another isolated environment where you can deliberately break configurations. Keep a written record of the initial state, the change made, the validation command, and the rollback. This trains the operational sequence the objectives imply: identify the service, locate its configuration, validate syntax, reload or restart safely, inspect logs, and test from the relevant client perspective.
A configuration copied from a tutorial is not enough evidence of readiness. Close the reference after the first attempt and rebuild the service from your notes. Then change one variable, such as a permitted subnet, a virtual host, an LDAP attribute, an SSH authentication method, or an NFS export restriction. Explain what should change and how you would prove it.
Use official LPI Learning Materials where they cover the current objective version. LPI says the materials are free, follow the respective objectives in their current version, and are continuously expanded and updated. Their lessons separate explanations, exercises, and solutions, making them useful for a cycle of read, perform, check, and repeat. Confirm that the material is aligned with version 4.5 before relying on it.
A practical lab record
For every exercise, capture the service name, key file paths, command used to validate configuration, expected listener or client result, relevant log location, and recovery step. For DNS, record both server-side validation and a client query. For Samba or NFS, record the access identity and the network restriction. For mail, record the delivery path and mailbox protocol. This turns scattered commands into operational knowledge.
A troubleshooting-first habit
When a test fails, avoid changing several files at once. Check the client’s route and name resolution, confirm that the service is running, validate syntax, inspect permissions and access controls, and then read the relevant logs. This order helps you distinguish an infrastructure failure from an application or policy failure and is more durable than memorizing isolated fixes.
What should a four-stage study roadmap look like?
A four-stage roadmap works well when the candidate has Linux administration fundamentals but needs structured coverage. The stages are orientation, core service labs, integrated troubleshooting, and readiness review. Adjust the time spent in each stage according to your diagnostic results; the official sources provide objectives and materials, not a mandatory preparation duration.
Stage one is an objective audit. Confirm the intended code with LPI, download or review the version 4.5 exam 202 objectives, and mark each objective as familiar, partly familiar, or new. Refresh networking, permissions, users, processes, service supervision, and logs before beginning the service labs. Do not schedule merely because you recognize the product names.
Stage two is configuration practice. Work through DNS and HTTP first, then Samba and NFS, followed by DHCP, PAM, LDAP, mail, and security. That order moves from name and application services to sharing, client identity, messaging, and protection. For each domain, produce one working configuration and one intentionally broken configuration that you can diagnose.
Stage three is integration. Build a small mixed-network scenario with at least one service client and one server role. Test forward and reverse DNS, web access, a file share, client address assignment, authentication, mail submission or mailbox access, SSH hardening, and a filtered or VPN path. The purpose is not to reproduce live exam content; it is to practise reasoning across dependencies.
Stage four is readiness review. Revisit every weak objective, use the official learning exercises, and perform timed mixed review with no reference material. Check whether you can identify the correct file, utility, protocol, or security control from a description and whether you can explain the likely consequence of a wrong setting. Schedule only after your mistakes become explainable rather than lucky guesses.
A compact weekly study rhythm
Use three complementary sessions: a concept session for reading the objective and service model, a lab session for configuration and failure testing, and a recall session for commands, file paths, protocols, and diagnostic decisions. Keep an error log. Each entry should state why your answer or change was wrong, what evidence would have corrected it, and how you will retest the point.
How to know a topic is ready
A topic is ready when you can configure its basic case, validate it, troubleshoot a deliberate failure, and describe the security boundary. Recognition alone is weak evidence. For example, knowing that /etc/exports belongs to NFS is different from choosing an appropriate client restriction, reloading exports, testing the mount, and diagnosing a permission or network mismatch.
Which mistakes waste the most preparation time?
The largest preparation mistakes are using the wrong exam code, studying a stale objective version, treating command recognition as administration skill, and ignoring lower-weight objectives entirely. Candidates also lose time by practising only successful configurations. The remedy is simple: verify the target, map every objective, use failure-driven labs, and keep weights attached to their named domains.
Do not buy or study from material that promises real exam questions or a guaranteed pass. Unverified question collections can contain obsolete objectives, incorrect answers, or material that conflicts with exam rules. They also encourage memorization without the ability to configure and troubleshoot. Use them neither as a substitute for the official objectives nor as evidence that you are ready.
Do not confuse a product name with the tested skill. “BIND” requires understanding authoritative and recursive roles, zones, validation, and security awareness. “Samba” requires server configuration, client interaction, identity mapping, and security modes. “SSH” requires daemon configuration and security decisions. For each technology, ask what problem it solves, where it is configured, how it is validated, and how it fails.
Avoid building the entire plan around one distribution’s defaults. File locations and service-management details can vary, while the objective names the underlying technologies, files, protocols, and utilities. Learn the documented concepts and verify examples in your lab. When an answer depends on a default, record the default as distribution-specific rather than treating it as a universal Linux rule.
Do not skip security because you can make a service work. An open share, permissive firewall rule, weak SSH policy, unrestricted recursive DNS service, or poorly controlled LDAP directory may pass a connectivity test while failing the administrative purpose. Every lab should include an access boundary, a validation step, and a rollback or restriction step.
What are the official exam and delivery details?
The official LPIC-2 overview states that each exam lasts 90 minutes and contains 60 multiple-choice and fill-in-the-blank questions. It lists exam 202 as part of LPIC-2 version 4.5, with official code 202-450. Treat these as the details for the official LPIC-2 exam, not as verified properties of the unofficial-looking 117-202 label.
LPIC-2 exams are delivered through Pearson VUE at testing centres or online through OnVUE, according to LPI’s getting-started information. The online-testing page states that online candidates need a quiet private location, a reliable computer with a camera, and a stable internet connection. It also states that OnVUE currently supports Windows and macOS, not Linux computers.
The official pages contain a language discrepancy that should be checked before scheduling. The LPIC-2 overview lists online OnVUE availability in English and Japanese, while the dedicated online-testing page lists LPIC-2 online exams in English. The overview separately lists testing-centre languages as English, German, Japanese, and Brazilian Portuguese. Confirm the language and delivery option shown for your appointment in the current Pearson VUE and LPI systems.
For online delivery, test the equipment and room against Pearson VUE’s current system requirements and policies before booking. If you study on Linux, do not assume that your Linux workstation can host OnVUE merely because the certification tests Linux skills; the supplied LPI online-testing information specifically identifies Windows and macOS as supported operating systems. A testing centre may be the more practical choice if your available computer does not meet the online requirement.
Scheduling sequence
LPI’s stated sequence is to obtain an LPI ID, purchase an exam voucher, create a Pearson account that is separate from the LPI account, and schedule through Pearson VUE. Verify that the selected appointment names the intended official exam code. Keep your LPI identity details consistent across accounts so the result can be associated with the correct certification record.
Results and certification status
Pearson VUE provides a score report immediately following the exam, according to LPI’s getting-started information. LPI states that it receives exam results within 24 hours and issues the certification if all requirements are met. Passing exam 202 by itself is not the same as receiving LPIC-2 when exam 201 or the active LPIC-1 requirement is still incomplete.
How should you handle the final review?
The final review should expose uncertainty, not provide another broad reading pass. Use the objective list to ask whether you can identify the service role, important configuration locations, validation utilities, access controls, and likely failure evidence. Spend the remaining study time on weak objectives and on explaining your reasoning without consulting notes.
Create short comparison sheets for commonly confused pairs: authoritative versus recursive DNS, forward versus reverse zones, Apache versus Nginx reverse-proxy roles, Samba versus NFS access models, SMTP versus IMAP or POP3, PAM versus LDAP responsibilities, and filtering versus NAT. Include one command or file associated with each side only when you understand its purpose.
Practise fill-in-the-blank precision separately from multiple-choice reasoning. For a blank, exact spelling, punctuation, path, option, or utility name may matter. For a choice question, first identify the service and objective, eliminate options that belong to another layer, and then check the security and operational consequence. This is a study recommendation, not a claim about undisclosed live questions.
Do a final administrative check: active LPIC-1 status, correct official exam code, objective version, appointment language, delivery method, Pearson account, equipment requirements if online, and the route for questions about the voucher or appointment. These checks prevent an avoidable scheduling problem from consuming the effort invested in technical preparation.
What should you do next?
First, resolve the identifier: compare 117-202 with LPI’s official 202-450 listing and your Pearson VUE appointment. Second, obtain or confirm an active LPIC-1 certification and determine whether exam 201 is also required for your LPIC-2 goal. Third, download the current objectives, build the domain matrix, and begin with a diagnostic lab rather than a question dump.
Use the official objectives page as the blueprint and the LPI Learning Materials site as a structured study resource. Allocate extra practice to the named higher-weight domains, but complete every objective. After each lab, preserve the configuration, break it deliberately, validate the service, and document the evidence that led to the fix.
When you are ready to schedule, follow LPI’s Pearson VUE process and recheck the current delivery and language information. If the booking interface still uses 117-202, obtain written clarification from the official provider before paying. The safest preparation decision is to study for the verified LPI objective version and schedule only the exam whose official identity is clear.
Conclusion
For an LPI-aligned target, the evidence points to LPIC-2 exam 202-450 in objective version 4.5, not a verified exam called 117-202. Confirm the code first, then prepare through the official domain list, weighted prioritization, and repeatable service labs. Keep the certification requirements separate from study advice: LPIC-2 requires both exams 201 and 202 plus an active LPIC-1 certification. Once your objective coverage, troubleshooting evidence, and appointment details all agree, schedule through Pearson VUE rather than relying on an unofficial catalogue label.
