- LPIC-1 Exam 102 has 60 multiple-choice and fill-in-the-blank questions in a 90-minute limit.
- Passing 102-500 alone does not award LPIC-1; you must also pass Exam 101-500.
- Six content areas: shells and scripting, desktops, admin tasks, system services, networking, and security.
- Fill-in-the-blank items reward exact command, option, and file-path recall, so memorize syntax rather than recognizing it.
Exam Snapshot: What You Are Reviewing
This cheat sheet covers LPIC-1 Exam 102 (Part 2 of 2), version 5.0 (102-500), published by the Linux Professional Institute (LPI). It is the second of two required papers. There are no prerequisites to sit the exam, but the LPIC-1 credential is only issued once you have passed both 101-500 and 102-500. If you are still weighing the commitment, our guide to LPIC-1 102-500 requirements and eligibility explains how the two papers fit together.
| Item | What to Know |
|---|---|
| Issuer | Linux Professional Institute (LPI) |
| Exam | LPIC-1 Exam 102, version 5.0 (102-500) |
| Questions | 60, multiple-choice and fill-in-the-blank |
| Time limit | 90 minutes |
| Prerequisites | None for the exam; both 101-500 and 102-500 are needed for LPIC-1 |
| Certification validity | 5 years (check LPI's current renewal or extension policy) |
| Fees and delivery | Verify with LPI and Pearson VUE |
That works out to roughly 90 seconds per question, which sounds generous until you hit a fill-in-the-blank item that needs an exact option string. Budget time for those. For a deeper look at the content areas, see the complete guide to all six LPIC-1 102-500 content areas.
Shells and Shell Scripting
This domain rewards candidates who actually write scripts rather than only read them. Expect questions that show a short script or one-liner and ask what it outputs, what is wrong with it, or which construct completes it.
Customizing the Shell Environment
Know which startup file runs in which situation and how variables propagate.
- Login shells read
/etc/profileand then the first of~/.bash_profile,~/.bash_login, or~/.profile; interactive non-login shells read~/.bashrc. /etc/skelis copied into new home directories at account creation.export VARmakes a variable visible to child processes;setlists shell variables andenvlists the environment.- Know
alias,unalias, and defining shell functions. source fileand. filerun a script in the current shell rather than a subshell.
Scripting Constructs
The exam favors core Bourne-style syntax and exit-status logic.
- The shebang line (
#!/bin/bash) selects the interpreter; the script needs the execute bit to run directly. - Positional parameters:
$1,$#,$@,$*; exit status of the last command is$?. - Tests:
testand[ ]with-f,-d,-r,-z,-eq,-gt, and string comparisons. - Control flow:
if/then/elif/else/fi,case/esac,for,while,until. - Command substitution with
$(command); chaining with&&,||, and;.
Also review the scripting-adjacent data task: basic SQL concepts for relational databases such as SELECT, WHERE, ORDER BY, and joins appear alongside shell material in the published objectives, so do not skip them.
User Interfaces and Desktops
Candidates often underestimate this area because it feels less "command line." It is conceptual, and the questions are usually easy points if you have seen the vocabulary.
X11, Wayland, and Display Managers
Understand the architecture, not just the names.
- X11 is a client-server display protocol; the X server runs on the machine with the display. Wayland is the newer replacement protocol.
- Display managers (such as GDM, LightDM, SDDM) provide the graphical login. Know that a display manager can be started or stopped through systemd targets.
- The
DISPLAYvariable and tools likexhostcontrol where X clients draw. - Configuration lives under
/etc/X11/, includingxorg.confandxorg.conf.dsnippets.
Accessibility and Remote Desktop
Know the concepts and typical tools at a recognition level.
- Accessibility features: sticky keys, slow keys, bounce keys, mouse keys, screen readers, and high-contrast themes.
- Remote desktop options include VNC, XDMCP, and SPICE; understand how they differ in transport and security posture.
- Tunneling remote graphical sessions through SSH is the secure pattern to remember.
Administrative Tasks
This is where hands-on admin experience pays off most. The questions cover accounts, scheduling, localization, and time, and they love specific file names and field orders.
User and Group Accounts
/etc/passwdhas seven colon-separated fields: username, password placeholder, UID, GID, GECOS comment, home directory, shell./etc/shadowholds password hashes and aging data and is readable only by privileged users;/etc/groupand/etc/gshadowcover groups.- Tools:
useradd,usermod,userdel(with-rto remove the home directory),groupadd,passwd,chage. - A shell of
/sbin/nologinblocks interactive logins for service accounts. useradd -Dshows defaults sourced from/etc/default/useraddand/etc/login.defs.
Job Scheduling
- cron: user tables edited with
crontab -e; system tables in/etc/crontaband/etc/cron.d/include an extra user field. Five time fields: minute, hour, day of month, month, day of week. - Access control:
/etc/cron.allowand/etc/cron.deny; the same pattern applies toat.allowandat.deny. - at: one-time jobs with
at,atq, andatrm. - systemd timers are an alternative to cron; know
systemctl list-timersand the pairing of a.timerunit with a.serviceunit.
Localization and Time
- Locale variables:
LANG,LC_*, andLC_ALL(which overrides the others); inspect withlocale. - Character encoding basics: UTF-8 versus legacy encodings, and converting with
iconv. - Time zones:
/etc/localtime,/usr/share/zoneinfo/,timedatectl, and theTZvariable.
/etc/passwd field order and the cron five-field order are classic recall questions. Write each out from memory a few times before exam day; recognizing them on a page is not the same as reproducing them.Essential System Services
Time synchronization and logging are the backbone of this domain, with printing also present in the objectives. Expect configuration-file and daemon-name questions.
Time Synchronization
Know both traditional and modern tooling.
- NTP via
ntpdandntpq -pto view peers; Chrony viachronydandchronyc. systemd-timesyncdis a lightweight SNTP client; check status withtimedatectl.- The hardware clock versus system clock:
hwclock --systohcand--hctosys. - Stratum levels describe distance from a reference clock.
System Logging
Understand the path from event to log file.
- rsyslog uses facility.priority selectors in
/etc/rsyslog.confand/etc/rsyslog.d/; know priorities fromdebugup toemerg. journalctlqueries the systemd journal; know-ufor a unit,-bfor the current boot,-pfor priority, and--since.- Journal persistence depends on
/var/log/journal/existing or the storage setting injournald.conf. loggersends a test message;logrotaterotates and compresses logs per/etc/logrotate.conf.
Mail Transfer Agent Basics and Printing
Both are recognition-level topics.
- MTAs such as Postfix, Exim, and sendmail; know that
mailqshows the queue and~/.forwardand/etc/aliasesredirect mail (runnewaliasesafter editing aliases). - CUPS manages printing; the web interface listens on port 631, configuration is in
/etc/cups/, and legacy commands includelpr,lpq,lprm, andlpstat.
Networking Fundamentals
Networking is typically the densest area of command and file-path recall. If you are short on time, this domain plus security usually offers the best return on review hours. See our breakdown of how hard the LPIC-1 102-500 exam is for where candidates tend to struggle.
Protocols and Addressing
- Well-known ports to memorize: 20/21 FTP, 22 SSH, 23 Telnet, 25 SMTP, 53 DNS, 80 HTTP, 110 POP3, 123 NTP, 143 IMAP, 443 HTTPS, 631 IPP.
- TCP is connection-oriented and reliable; UDP is connectionless. ICMP carries diagnostics such as ping.
- IPv4 private ranges:
10.0.0.0/8,172.16.0.0/12,192.168.0.0/16. Be able to read CIDR notation and compute the netmask. - IPv6 basics: 128-bit addresses,
::compression, link-local prefixfe80::/10, and loopback::1.
Configuration and Troubleshooting Tools
- The
ipcommand (ip addr,ip link,ip route) is the modern standard; know how it maps to legacyifconfigandroute. - Name resolution:
/etc/hosts,/etc/resolv.conf, and/etc/nsswitch.conf(which sets lookup order). - Diagnostics:
ping,traceroute,tracepath,ss(replacingnetstat),dig,host, andnc. - Persistent configuration varies by distribution; know that NetworkManager (
nmcli) and systemd-networkd are common, and recognize Debian-style and Red Hat-style config locations.
Key Takeaway
Memorize the legacy-to-modern mapping: ifconfig to ip addr, route to ip route, and netstat to ss. Questions may reference either generation, and you need to recognize both.
Security
Security questions blend concepts with specific commands and files. Pay particular attention to SSH and privilege-escalation configuration.
Administrative Security
Auditing the local system for risk.
- Find SUID/SGID files with
find / -perm -4000and-perm -2000. - Check for open ports with
ss -tulpnornmap; list open files withlsof; review logins withlast,lastb, andwho. - Delegate privileges with
sudoand edit the policy safely withvisudo(/etc/sudoersand/etc/sudoers.d/). - Resource limits via
ulimitand/etc/security/limits.conf. /etc/nologinblocks non-root logins;/etc/hosts.allowand/etc/hosts.denyhandle TCP Wrappers rules.
SSH and Cryptography
Know keys, files, and the client/server split.
- Server config:
/etc/ssh/sshd_config; client config:~/.ssh/configand/etc/ssh/ssh_config. - User keys:
ssh-keygencreates a pair; the public key goes into the remote~/.ssh/authorized_keys(ssh-copy-idautomates this);~/.ssh/known_hostsrecords host fingerprints. - Private keys must be protected with strict permissions (typically
600);ssh-agentandssh-addcache decrypted keys. - Port forwarding with
-L(local) and-R(remote); common hardening options include disabling root login and password authentication. - GnuPG basics:
gpg --gen-key,--encrypt,--sign,--import, and--export; understand public-key versus symmetric encryption.
For a candidate planning study around which domains carry the most trap questions, our LPIC-1 102-500 study guide lays out a full preparation approach, while this page stays focused on facts to recall.
Quick-Reference Command Table
| Task | Command or File | Domain |
|---|---|---|
| Edit user cron table | crontab -e | Administrative Tasks |
| Show time and zone settings | timedatectl | Administrative Tasks |
| Query systemd logs for a unit | journalctl -u unit | Essential System Services |
| Show NTP peers | ntpq -p or chronyc sources | Essential System Services |
| Show addresses and routes | ip addr, ip route | Networking Fundamentals |
| List listening sockets | ss -tulpn | Networking Fundamentals |
| Resolver lookup order | /etc/nsswitch.conf | Networking Fundamentals |
| Safely edit sudo policy | visudo | Security |
| Generate SSH key pair | ssh-keygen | Security |
| Find SUID files | find / -perm -4000 | Security |
| Run script in current shell | source script | Shells and Shell Scripting |
How to Sequence Your Final Review
Rather than reviewing domains in the order LPI lists them, front-load the ones where fill-in-the-blank recall is heaviest and where the facts are easiest to forget. This is a suggested sequence, not an official one.
Networking Fundamentals
- Port numbers, CIDR math, and the
ip/sstoolset - Resolver files and lookup order
Security and Administrative Tasks
- SSH key workflow, sudo, and SUID auditing
- passwd/shadow fields, cron syntax, locale and time zone handling
Shells, Services, and Desktops
- Write short scripts using tests, loops, and exit codes
- Logging, time sync, CUPS, and X11/Wayland vocabulary
Then spend your remaining time on timed practice. Our LPIC-1 102-500 practice tests are independently authored for self-assessment; they are not actual LPI questions or an official exam simulation, so use them to find weak spots rather than to predict your result. Build the habit of typing answers rather than recognizing them.
Frequently Asked Questions
No. LPIC-1 requires passing both Exam 101-500 and Exam 102-500. Passing only this paper does not award the credential. See the overview of what LPIC-1 102-500 certification means for how the pieces fit together.
The paper has 60 multiple-choice and fill-in-the-blank questions with a 90-minute limit. Fill-in-the-blank items require you to type exact commands, options, or paths.
A current official passing score was not verified for this article, so confirm it with LPI directly. Our page on the LPIC-1 102-500 passing score tracks what is publicly known.
LPIC-1 validity is 5 years. Renewal and extension rules can change, so check LPI's current policy before planning around it.
Verify pricing and regional delivery options with LPI and Pearson VUE, since these vary by region and change over time. For a general cost overview, read the LPIC-1 102-500 certification cost breakdown.