- LPIC-2 202-450 is the second of two required exams (201-450 and 202-450) for the LPIC-2 credential from the Linux Professional Institute.
- The paper has 60 multiple-choice and fill-in-the-blank questions with a 90-minute time limit.
- Six content areas: DNS, web services, file sharing, network client management, e-mail services, and system security.
- Passing 202-450 alone does not award LPIC-2; an active LPIC-1 and a pass on 201-450 are also required.
What LPIC-2 Exam 202 Actually Is
LPIC-2 Exam 202 (Part 2 of 2), version 4.5, carries the exam code 202-450. It is issued by the Linux Professional Institute (LPI), a vendor-neutral certifying body, and it covers the network-service side of advanced Linux administration. Where its companion paper, Exam 201, concentrates on the kernel, boot process, storage, and system maintenance, Exam 202 is about the services that turn a Linux machine into infrastructure: name servers, web servers, file servers, DHCP and authentication, mail transfer, and the security controls that wrap around all of them.
If you have seen the same acronym attached to other credentials, set those aside. This article, and this site, concerns only the LPI paper. For a quick orientation on naming, our explainers on what LPIC-2 202-450 is and what the code stands for break down the terminology, while the certification overview covers the broader credential picture.
How Exam 202 Fits Into the LPIC-2 Credential
The LPIC-2 credential, branded as "Linux Network Professional," is built from three requirements that must all be satisfied:
- An active LPIC-1 certification.
- A passing result on Exam 201-450.
- A passing result on Exam 202-450.
The two LPIC-2 exams can be taken in either order, so some candidates start with 202-450 because they work daily with web, DNS, and mail services and want to bank an early win. The credential is only issued once all three pieces are in place. For the full eligibility picture, see our guide to LPIC-2 202-450 requirements and prerequisites.
| Element | Exam 201-450 | Exam 202-450 |
|---|---|---|
| Position in LPIC-2 | Part 1 of 2 | Part 2 of 2 |
| Questions | 60 multiple-choice and fill-in-the-blank | 60 multiple-choice and fill-in-the-blank |
| Time limit | 90 minutes | 90 minutes |
| Objectives version | 4.5 | 4.5 |
| Awards LPIC-2 on its own? | No | No |
Format and Question Style
Each paper contains 60 questions, and you have 90 minutes to complete them. That works out to well under two minutes per item, so recall and recognition need to be fast. Two question types appear:
- Multiple-choice: including single-answer and multiple-answer items, where you select the correct option or options.
- Fill-in-the-blank: where you type a short answer such as a command name, a directive, a file path, or an option. There is no list to guess from.
The fill-in-the-blank style is what catches candidates who have only recognized concepts rather than used them. Knowing that a BIND zone needs an SOA record is not enough; you may need to produce the exact directive, parameter, or file name from memory. Samba, Apache, Postfix, and OpenSSH all have configuration vocabulary that you are expected to recall precisely.
LPI does not publish the passing score in the sources used for this article, so we do not assert one here. Our page on the LPIC-2 202-450 passing score tracks what is and is not verified, and the pass rate discussion explains why we avoid quoting unverified percentages.
The Six Content Areas in Detail
LPI publishes Exam 202 as a set of objective headings grouped into six topics. The objectives are weighted individually by LPI rather than being assigned neat domain percentages, so this site does not claim aggregate domain weights. What follows is a practical walkthrough of each area. For a deeper per-domain treatment, read the complete guide to all six content areas.
Domain Name Server
Domain Name Server
Candidates must be able to configure, secure, and troubleshoot DNS on Linux, with BIND as the central tool.
- Basic DNS server configuration:
named.conf, zone files, and the main record types (A, AAAA, MX, NS, CNAME, PTR, SOA). - Create and maintain DNS zones, including forward and reverse zones, delegation, and slave/secondary servers.
- Securing a DNS server: restricting queries and transfers, running in a chroot or as an unprivileged user, and understanding DNSSEC concepts.
- Diagnostics with tools such as
digandhost, plus reading logs and usingrndc.
Web Services
Web Services
This area centers on running and hardening Apache HTTPD, then extends to proxy and reverse-proxy services and Nginx.
- Apache configuration: virtual hosts, modules, directory and access controls, and logging.
- HTTPS: certificates, TLS configuration, and SNI-based virtual hosting.
- Squid as a caching proxy, including access control lists.
- Nginx as a web server and reverse proxy.
File Sharing
File Sharing
Expect questions on the two classic Linux file-sharing stacks and how they interoperate with other systems.
- Samba server configuration, share definitions, user mapping, and domain-related roles.
- Diagnosing Samba with its client and testing utilities.
- NFS server and client configuration, export options, and security considerations.
Network Client Management
Network Client Management
This area covers the services that hand out addresses and identities to client machines.
- DHCP configuration: scopes, leases, reservations, and relay concepts.
- PAM authentication and how modules and stacks are defined.
- LDAP client usage: searching, adding, and modifying directory entries, and understanding the directory structure.
E-Mail Services
E-Mail Services
Mail is a dense topic with its own vocabulary, so budget real time for it.
- Postfix configuration: main parameters, relaying, aliases, virtual domains, and queue management.
- Managing local mail delivery, including filtering with tools such as Procmail or Sieve.
- Serving mailboxes to clients, with Dovecot handling IMAP and POP3.
System Security
System Security
Security closes the exam and reaches across everything above.
- Configuring a router: IP forwarding, firewall rules, and NAT.
- Securing FTP servers and managing access.
- Secure shell (SSH): server hardening, key-based authentication, and tunneling.
- Security tasks and intrusion detection tooling, plus VPN setup with OpenVPN.
Key Takeaway
Exam 202 rewards hands-on familiarity with real configuration files. If a topic here is something you have never actually configured, build a small lab for it before you rely on reading alone.
Who Hires for This Skill Set
The skills tested in 202-450 map directly onto the services that organizations run themselves instead of buying as managed products. Roles that tend to value this knowledge include:
- Linux systems administrators responsible for DNS, web, and mail servers in on-premises or hybrid environments.
- Network and infrastructure engineers who deploy DHCP, LDAP-backed authentication, and VPN access.
- Hosting and managed-services providers that operate Apache or Nginx fleets, mail relays, and name servers for customers.
- Security-focused administrators who harden SSH, firewalls, and file-sharing exposure.
- Educational institutions, public-sector bodies, and mid-sized enterprises that run Samba shares for mixed Windows and Linux desktops.
We deliberately avoid quoting earnings figures, since no verified numbers are part of the facts for this exam. For an honest discussion of how the credential relates to job outcomes, see our pages on LPIC-2 202-450 jobs, the salary guide, and whether the certification is worth it.
Registration, Fees, and Validity
LPI exams are delivered through Pearson VUE. Fees and delivery options, such as test center versus online proctoring, can vary by region and change over time, so confirm the current details with LPI and Pearson VUE before you budget. We do not quote a fixed price here because a current verified figure is not part of this article's facts. Our certification cost breakdown explains what to account for beyond the exam fee itself, and the exam dates and scheduling guide covers how booking windows work.
Two practical points are worth remembering:
- Validity: LPIC-2 certification is valid for 5 years. Verify current renewal options with LPI when you approach the end of that period.
- Both exams are needed: a pass on 202-450 is recorded, but the LPIC-2 credential is awarded only after you also hold an active LPIC-1 and have passed 201-450.
Sequencing Your Preparation by Domain
You do not need an elaborate method for this exam; you need a sensible order. Services that depend on each other should be learned in dependency order, because DNS underpins almost everything else and security ties it together. Here is one workable sequence:
DNS first
- Build a BIND lab with a forward and reverse zone, then a secondary server.
- Reason: web, mail, and client management all lean on working name resolution.
Web services
- Apache virtual hosts and TLS, then Squid and Nginx as proxies.
File sharing and client management
- Samba and NFS exports, then DHCP, PAM, and LDAP client tasks.
E-mail, then security
- Postfix and Dovecot, which need DNS MX records you already built.
- Finish with router/firewall, SSH, FTP hardening, and OpenVPN.
Adjust the timeline to your own background. A working mail administrator can shorten the e-mail block and spend the time on Samba or LDAP instead. For a fuller plan, follow our LPIC-2 202-450 study guide, keep the cheat sheet handy for last-minute review, and browse the training options overview if you want structured courses. When you are ready to test recall under time pressure, our practice test platform offers independently written questions mapped to the published objectives. They are not actual LPI questions and are not an official exam simulation, but they help you check your readiness against each topic area.
How Demanding Is It?
The difficulty comes from breadth and precision rather than any single hard concept. Six service families, each with its own configuration syntax, in 90 minutes, with typed answers on some items, means shallow familiarity is not enough. Candidates who work with these services regularly usually find the breadth manageable; candidates who have mainly used cloud-managed equivalents often need extra lab time on BIND, Postfix, and Samba specifically. Our difficulty guide goes deeper on where candidates tend to struggle, and you can try a practice session to benchmark yourself honestly.
Frequently Asked Questions
No. LPIC-2 requires an active LPIC-1 plus passing both 201-450 and 202-450. Passing 202-450 alone does not award the credential.
The paper has 60 multiple-choice and fill-in-the-blank questions with a 90-minute limit.
Six areas: Domain Name Server, Web Services, File Sharing, Network Client Management, E-Mail Services, and System Security. LPI weights individual objectives rather than publishing overall domain percentages.
The two LPIC-2 exams can be taken in either order, but you still need both passed and an active LPIC-1 before LPIC-2 is awarded.
LPIC-2 certification is valid for 5 years. Check with LPI and Pearson VUE for current renewal options, regional pricing, and delivery methods.