- Exam 202 (202-450) has 60 multiple-choice and fill-in-the-blank questions with a 90-minute limit.
- The six content areas are DNS, Web Services, File Sharing, Network Client Management, E-Mail Services, and System Security.
- LPI weights individual objectives, not whole domains, so avoid assuming any area is "light."
- Passing 202-450 alone does not award LPIC-2; you must also pass 201-450 and hold an active LPIC-1.
How LPIC-2 Exam 202 Is Organized
LPIC-2 Exam 202 (Part 2 of 2), version 4.5, is the second of two papers a candidate must pass to earn the LPIC-2 credential from the Linux Professional Institute. While Exam 201 concentrates on the system itself (capacity planning, kernel, boot, filesystems, storage, and networking fundamentals), Exam 202 turns outward to the network services a Linux administrator runs for other people and machines. If you want a broader orientation first, see What Is LPIC-2 202-450? for the basics of what this paper covers.
The paper contains 60 questions in two formats: standard multiple choice and fill-in-the-blank. The time limit is 90 minutes, which works out to roughly 90 seconds per question. That pace is comfortable for recall questions but tight for items that ask you to read a zone file or a configuration excerpt and spot the fault.
The published objectives for Exam 202 are grouped under six headings. LPI assigns weights to individual objectives rather than to the headings, so this guide does not quote domain percentages. Treat every heading as examinable and look at the objective-level detail on the official LPI objectives page for version 4.5.
For a candid look at what makes this paper demanding, read How Hard Is the LPIC-2 202-450 Exam?, and for the foundation behind the whole credential, see LPIC-2 202-450 Requirements.
Domain 1: Domain Name Server
The DNS content area is the one most candidates describe as the deepest. It centers on BIND, the traditional Linux name server, and goes well beyond running a simple caching resolver.
Domain Name Server: What You Must Master
You need to configure authoritative and recursive servers, manage zones, and secure the service.
- Basic BIND 9.x configuration:
named.conf, the options block, zone statements, and where zone files live - Authoritative zone files: SOA, NS, A, AAAA, MX, CNAME, PTR records, and serial number handling
- Forward and reverse zones, including IPv6 reverse zones
- Primary and secondary (master/slave) servers, zone transfers, and NOTIFY behavior
- Running a caching-only or forwarding name server
- Tools such as
rndc,dig,host,named-checkconf, andnamed-checkzone - Securing DNS: running named in a chroot or as an unprivileged user, restricting queries and transfers, and TSIG-signed transfers
- DNSSEC concepts: key types, signing zones, and how validation works, plus DANE and TLSA records at a conceptual level
Questions in this area often show a snippet of a zone file or named.conf and ask what is wrong or what will happen. Common traps include a missing trailing dot on a fully qualified name, an SOA serial that was not incremented, and allow-transfer rules that are too open or too closed. Learn to read zone files line by line, because the exam rewards that skill more than memorizing option lists.
Domain 2: Web Services
The Web Services area covers the two classic jobs of a Linux web host: serving content through Apache HTTPD and acting as a proxy with Squid. It also touches on Nginx as a lightweight web server and reverse proxy.
Web Services: What You Must Master
Expect configuration-level questions rather than purely conceptual ones.
- Apache configuration: main configuration files,
apachectl, loadable modules, and the directives that control listening addresses and document roots - Virtual hosting: name-based and IP-based virtual hosts, and how Apache selects a host for a request
- Access control and authentication:
.htaccess,AllowOverride,Requiredirectives, and basic authentication with password files - HTTPS: SSL/TLS configuration, certificate and key paths, protocol and cipher settings, and SNI
- Apache as a reverse proxy and basic content handling such as CGI and PHP integration
- Squid: ACL definitions,
http_accessrules and their ordering, caching behavior, and authentication - Nginx: basic server and location blocks, reverse proxy and load-balancing concepts
Rule ordering is the recurring theme. In Squid, the first matching http_access line wins, so a misplaced deny or allow changes behavior entirely. In Apache, understanding how Directory, Location, and .htaccess contexts combine is what separates a correct answer from a plausible one.
Domain 3: File Sharing
File Sharing covers the two protocols that dominate mixed environments: SMB/CIFS through Samba, and NFS for Unix-to-Unix sharing. A smaller portion covers other data-transfer services such as FTP-based sharing.
File Sharing: What You Must Master
You should be able to stand up a share, secure it, and troubleshoot a client that cannot reach it.
- Samba server configuration in
smb.conf: global settings, share definitions, and security and authentication modes - Samba user management and tools such as
smbpasswd,testparm,smbclient, andnet - Samba roles, including standalone servers and domain member servers, and the idea of integrating with a directory
- Share-level and filesystem-level permissions and how they interact
- NFS server setup:
/etc/exports, export options,exportfs, and the supporting RPC services - NFS client mounting, mount options, and security considerations including root squashing and host restrictions
A common source of lost points is confusing which permission layer is actually blocking access. On a Samba share, the effective result depends on both the share definition and the underlying filesystem permissions. Practice reasoning through both layers instead of memorizing parameters in isolation.
Domain 4: Network Client Management
This area covers the services that manage and authenticate network clients: automatic address assignment, IPv6 autoconfiguration, directory-based authentication, and pluggable authentication on the local system.
Network Client Management: What You Must Master
The emphasis is on services that configure or identify clients on the network.
- DHCP: configuring the ISC DHCP server, scopes and subnets, reservations, options, and relay agents
- IPv6 autoconfiguration: router advertisements and how clients derive addresses
- PAM: module types, control flags, stack ordering, and the configuration files in the PAM directory
- LDAP client and server basics: directory structure, entries and attributes, search tools such as
ldapsearch, and adding or modifying entries - Authentication via LDAP and how a Linux system consults a directory for users and groups
PAM tends to trip people up because the control flags (required, requisite, sufficient, optional) change behavior subtly depending on their order in the stack. When you study, write a small stack on paper and trace what happens when each module succeeds or fails. That exercise is closer to how exam items are framed than rote definition recall.
Domain 5: E-Mail Services
E-Mail Services spans the full path of a message: transport between servers, local delivery, and retrieval by clients. It also touches on filtering and sorting incoming mail.
E-Mail Services: What You Must Master
Know how messages flow and which daemon is responsible at each step.
- Mail transfer agents: Postfix configuration through
main.cfandmaster.cf, plus the role of aliases and virtual domains - Managing the mail queue and diagnosing delivery problems with Postfix tools
- Managing mail delivery: relaying rules, restrictions, and basic anti-spam and access controls
- Mail filtering and sorting on delivery, including Sieve-based filtering
- Mail retrieval with IMAP and POP3 servers such as Dovecot, including authentication and mailbox formats
- Securing mail transport with TLS
Many candidates find that the Postfix material rewards understanding the processing pipeline rather than memorizing parameters. If you can explain what happens to a message from the moment it is accepted to the moment it is delivered or bounced, most diagnostic questions become straightforward.
Domain 6: System Security
System Security is the broadest of the six headings and pulls together network-facing hardening, remote access, intrusion detection, and encrypted tunnels.
System Security: What You Must Master
Think of this as defending the services you configured in the other five areas.
- Firewalling with netfilter: iptables and nftables concepts, chains, tables, connection tracking, and NAT
- OpenSSH: server and client configuration, key-based authentication, host keys, agent use, and port forwarding
- Network security scanning and monitoring: port scanners, traffic analysis, and understanding exposed services
- Intrusion detection concepts, including tools such as Snort and Tripwire-style file integrity monitoring
- OpenVPN: server and client configuration, certificates, and tunnel behavior
- Security tasks such as hardening services and handling security alerts
Firewall questions in particular benefit from hands-on work. Build a rule set on a lab machine, test it, and then predict how each packet type would be treated. That practice makes chain ordering, default policies, and stateful matching intuitive rather than abstract.
Key Takeaway
The six areas interlock. A Postfix server needs DNS MX records and a firewall that allows SMTP; a Samba server needs correct client authentication and host restrictions. Building one small lab where all six services coexist teaches the cross-domain reasoning that scenario questions test.
Sequencing the Six Domains
Generic study habits matter far less than ordering the material sensibly. Because the services depend on each other, a dependency-first sequence reduces repeated relearning. The plan below is an example, and you should stretch or compress it to fit your own schedule. For a fuller plan, see the LPIC-2 202-450 study guide.
DNS and System Security Groundwork
- Build a BIND primary and secondary; practice zone file reading
- Review netfilter basics so later labs can be firewalled
Web Services
- Apache virtual hosts, TLS, and access control
- Squid ACL ordering and a basic Nginx reverse proxy
File Sharing and Network Client Management
- Samba shares plus NFS exports and mounts
- DHCP scopes, PAM stacks, and LDAP queries
E-Mail Services and Review
- Postfix and Dovecot working with your DNS MX records
- OpenSSH, OpenVPN, and a timed pass through weak areas
The LPIC-2 202-450 cheat sheet is useful for last-pass review of file paths, daemon names, and key directives once the labs are done.
Certification Mechanics and Career Context
Several facts about the credential path are easy to misread, so it helps to be precise.
| Topic | What applies to Exam 202 (202-450) |
|---|---|
| Issuer | Linux Professional Institute (LPI) |
| Format | 60 multiple-choice and fill-in-the-blank questions |
| Time limit | 90 minutes |
| Prerequisite | An active LPIC-1 certification is required to receive LPIC-2 |
| Awarding the credential | Both 201-450 and 202-450 must be passed; this paper alone does not award LPIC-2 |
| Validity | 5 years for the certification |
| Fees, delivery, renewal | Verify current regional pricing, delivery options, and renewal rules with LPI and Pearson VUE |
Because this guide does not assert a passing score or pass rate, check the official sources for those figures. For related background, the pages on certification cost, passing score, and exam dates cover the logistics in more detail.
On the career side, the services this exam covers are the daily work of systems administrators, infrastructure engineers, and hosting or managed-services staff who run DNS, web, mail, and file servers. If you are weighing the investment, see whether the certification is worth it, and browse LPIC-2 202-450 jobs for the roles that typically value it.
When you are ready to test your recall under realistic conditions, use the objective-mapped practice questions on the main practice test site. These are independently authored study materials mapped to the published objectives, not actual LPI exam questions, and they should be used to find weak spots rather than to predict a result. Reviewing your misses by domain on the practice platform lets you return to the exact area, whether that is a zone file, a Postfix queue, or a PAM stack, and fix it with a lab.
Frequently Asked Questions
There are six published headings: Domain Name Server, Web Services, File Sharing, Network Client Management, E-Mail Services, and System Security. LPI weights individual objectives under these headings rather than publishing a percentage per domain.
No. You must pass both 201-450 and 202-450, and you need an active LPIC-1 certification to receive LPIC-2. Passing this paper alone does not award the credential.
The paper has 60 questions, a mix of multiple-choice and fill-in-the-blank, with a 90-minute limit. Fill-in-the-blank items require you to supply exact commands, options, or directives.
Start with DNS, since mail and web services depend on correct name resolution, and pair it with basic firewall work. Then move through web, file sharing, client management, and e-mail, finishing with security review and timed practice.
The certification is valid for 5 years. Renewal options, regional pricing, and delivery details can change, so confirm the current rules directly with LPI and Pearson VUE before you plan your timeline.