LPIC-1 101-500 vs 102-500: What's the Difference?
If you're studying for LPIC-1, you know it requires passing two exams: 101-500 and 102-500. But how different are they really? Which is harder? Which should you take first — and should you take them on the same day?
This guide breaks down every difference so you can plan your study time effectively.
Quick Comparison
| Exam 101-500 | Exam 102-500 | |
|---|---|---|
| Full name | System Administrator 1 | System Administrator 2 |
| Questions | 60 | 60 |
| Duration | 90 minutes | 90 minutes |
| Passing score | 500 / 800 | 500 / 800 |
| Topics | 5 | 7 |
| Prerequisite | None | LPIC-1 101-500 or equivalent |
| Price per exam | €200 | €200 |
| Avg. study time | 4–5 weeks | 4–5 weeks |
Both exams count toward the same LPIC-1 certification. You must pass both to earn LPIC-1 — there's no way to substitute or skip one.
Topic Breakdown
Exam 101-500 Topics
| Topic | Weight | Key Subjects |
|---|---|---|
| System Architecture | 8 | Boot process, runlevels, GRUB, kernel modules, devices, udev |
| Linux Installation & Package Management | 18 | Disk partitioning, filesystem creation, mount points, dpkg, apt, RPM, yum, zypper |
| GNU & Unix Commands | 25 | Bash basics, text processing (grep, sed, awk), pipes, redirects, file permissions, ACLs, process management |
| Devices, Linux Filesystems, FHS | 22 | Filesystem hierarchy, inodes, links, disk quotas, filesystem repair (fsck), swap |
| Graphical Interfaces & Desktops | 5 | X11, Wayland, display managers, remote desktop (VNC, xrdp) |
Total weight: 78% across 3 core topics (GNU/Unix Commands, Filesystems, Package Management).
Exam 102-500 Topics
| Topic | Weight | Key Subjects |
|---|---|---|
| Shells, Scripting & Data Management | 15 | Advanced bash scripting, customizing shell environments, SQL (sqlite), regular expressions |
| User Interfaces & Desktops | 5 | Accessibility, localization, desktop environments |
| Administrative Tasks | 10 | User/group management, cron, systemd timers, locale configuration, log management |
| Essential System Services | 15 | NTP, syslog/journald, cron/anacron, printing (CUPS) |
| Networking Fundamentals | 22 | TCP/IP, DNS resolution, routing, network diagnostics (ping, ss, nmap, tcpdump), DHCP |
| Security | 15 | PAM, sudo, user limits, iptables/nftables, encryption (GnuPG), SSH, OpenVPN |
| Installation & Virtualization | 8 | Network installation (PXE), virtual machines (KVM, VirtualBox), containers (LXC, Docker basics) |
Total weight: 62% across 3 core topics (Networking, Scripting, Security).
Key Differences
Difficulty
102-500 is generally harder for most candidates. Why:
- More topics (7 vs 5) with a broader syllabus
- Networking (22% weight) requires understanding abstract concepts like routing, DNS resolution order, and subnetting
- Security topics (PAM, iptables, GnuPG) are less commonly used day-to-day
That said, 101-500 has denser storage/partitioning content that some find tedious.
Practical vs Theoretical
| Aspect | 101-500 | 102-500 |
|---|---|---|
| Command-line skill | Heavy (grep, sed, awk, pipes) | Moderate (more scripting logic) |
| Concept memorization | Moderate | Heavy (security, networking theory) |
| Troubleshooting scenarios | Common | Moderate |
| Configuration file editing | Moderate | Heavy (PAM, NTP, CUPS, iptables) |
Overlap
About 15–20% of topics overlap between the two exams:
| Shared Subject | 101-500 Coverage | 102-500 Coverage |
|---|---|---|
| Filesystem management | Filesystem creation, mounting, FHS | Filesystem (continued) |
| User management | Basic user/group commands | PAM, password policies, quotas |
| Process management | ps, top, kill, nice | Service management (systemd) |
| Locales | Basic locale config | Advanced localization |
The overlap means studying for one prepares you for some of the other — but not enough to skip deliberate preparation for each exam.
Should You Take Both Exams on the Same Day?
| Approach | Pros | Cons |
|---|---|---|
| Same day | Saves travel time, material stays fresh, one registration process | Mental fatigue, higher risk of second-exam slump |
| Weeks apart | More focused prep per exam, time to reinforce weak areas | Need to re-review material after gap, two separate registration fees (same cost) |
Our recommendation: Take them 2–3 weeks apart. Use the first exam's result to focus your remaining study on weak areas. If you score 85%+ on the first practice exam, same-day is a viable option.
Study Strategy by Exam
For 101-500 (weeks 1–5)
- Hands-on terminal work — 101-500 is the more practical exam. Read a topic, then run the commands.
- Master the 3 heavy topics — GNU/Unix Commands (25%), Filesystems (22%), Package Management (18%). These are 65% of the exam.
- Filesystem lab — Create partitions, build filesystems, mount them, break them, repair them. This is the most common failure area.
- Process management — Understand zombie processes, signals, priorities, and job control thoroughly.
For 102-500 (weeks 6–10)
- Build a network lab — At least two VMs so you can practice SSH, DNS, routing, and firewall rules.
- Scripting practice — Write 15–20 bash scripts solving real problems (log rotation, backup automation, user provisioning).
- Security drill — Configure PAM limits, set up iptables rules, create certificate authorities with GnuPG.
- Service configuration — Practice setting up NTP, CUPS, and a syslog server from scratch. These are common exam scenarios.
Practice Checklist
Use this checklist to gauge readiness for each exam:
Ready for 101-500 when you can:
- Boot a Linux system into single-user mode and fix a broken GRUB config
- Create, resize, and repair ext4 and XFS filesystems
- Configure apt repositories, install packages, and resolve dependency issues
- Use grep, sed, awk, and find with complex regex patterns
- Explain every field in
ls -loutput, including SELinux context
Ready for 102-500 when you can:
- Write a bash script with functions, loops, and error handling
- Configure PAM to enforce password complexity and account lockout
- Set up a simple firewall with nftables that allows SSH and web traffic
- Diagnose DNS resolution failures using dig, nslookup, and strace
- Set up an NTP client and verify synchronization
Test your readiness. Our LPIC-1 practice platform offers timed simulations for both 101-500 and 102-500. Get domain-level analytics showing exactly which topics need more work. Start free →
Which Exam Leads to Better Career Outcomes?
Both are required for LPIC-1, but the skills map to different roles:
| Exam | Skills Gained | Relevant Roles |
|---|---|---|
| 101-500 | System administration basics, command-line fluency | Junior sysadmin, helpdesk, support engineer |
| 102-500 | Networking, security, automation | Sysadmin, DevOps engineer, security analyst |
Bottom line: 102-500 skills (scripting, networking, security) tend to command higher salaries because they're closer to DevOps and SRE roles. But without 101-500 foundations, those skills aren't useful.
Ready to put this knowledge to the test? Our LPI practice portal includes 200+ realistic questions covering LPIC-1, LPIC-2, LPIC-3, and DevOps Tools Engineer certifications. Study mode, timed exams, domain breakdowns, and weak-area analysis included.