LPIC-1 101-500 vs 102-500: What's the Difference?

If you're studying for LPIC-1, you know it requires passing two exams: 101-500 and 102-500. But how different are they really? Which is harder? Which should you take first — and should you take them on the same day?

This guide breaks down every difference so you can plan your study time effectively.

Quick Comparison

	Exam 101-500	Exam 102-500
Full name	System Administrator 1	System Administrator 2
Questions	60	60
Duration	90 minutes	90 minutes
Passing score	500 / 800	500 / 800
Topics	5	7
Prerequisite	None	LPIC-1 101-500 or equivalent
Price per exam	€200	€200
Avg. study time	4–5 weeks	4–5 weeks

Both exams count toward the same LPIC-1 certification. You must pass both to earn LPIC-1 — there's no way to substitute or skip one.

Topic Breakdown

Exam 101-500 Topics

Topic	Weight	Key Subjects
System Architecture	8	Boot process, runlevels, GRUB, kernel modules, devices, udev
Linux Installation & Package Management	18	Disk partitioning, filesystem creation, mount points, dpkg, apt, RPM, yum, zypper
GNU & Unix Commands	25	Bash basics, text processing (grep, sed, awk), pipes, redirects, file permissions, ACLs, process management
Devices, Linux Filesystems, FHS	22	Filesystem hierarchy, inodes, links, disk quotas, filesystem repair (fsck), swap
Graphical Interfaces & Desktops	5	X11, Wayland, display managers, remote desktop (VNC, xrdp)

Total weight: 78% across 3 core topics (GNU/Unix Commands, Filesystems, Package Management).

Exam 102-500 Topics

Topic	Weight	Key Subjects
Shells, Scripting & Data Management	15	Advanced bash scripting, customizing shell environments, SQL (sqlite), regular expressions
User Interfaces & Desktops	5	Accessibility, localization, desktop environments
Administrative Tasks	10	User/group management, cron, systemd timers, locale configuration, log management
Essential System Services	15	NTP, syslog/journald, cron/anacron, printing (CUPS)
Networking Fundamentals	22	TCP/IP, DNS resolution, routing, network diagnostics (ping, ss, nmap, tcpdump), DHCP
Security	15	PAM, sudo, user limits, iptables/nftables, encryption (GnuPG), SSH, OpenVPN
Installation & Virtualization	8	Network installation (PXE), virtual machines (KVM, VirtualBox), containers (LXC, Docker basics)

Total weight: 62% across 3 core topics (Networking, Scripting, Security).

Key Differences

Difficulty

102-500 is generally harder for most candidates. Why:

More topics (7 vs 5) with a broader syllabus
Networking (22% weight) requires understanding abstract concepts like routing, DNS resolution order, and subnetting
Security topics (PAM, iptables, GnuPG) are less commonly used day-to-day

That said, 101-500 has denser storage/partitioning content that some find tedious.

Practical vs Theoretical

Aspect	101-500	102-500
Command-line skill	Heavy (grep, sed, awk, pipes)	Moderate (more scripting logic)
Concept memorization	Moderate	Heavy (security, networking theory)
Troubleshooting scenarios	Common	Moderate
Configuration file editing	Moderate	Heavy (PAM, NTP, CUPS, iptables)

Overlap

About 15–20% of topics overlap between the two exams:

Shared Subject	101-500 Coverage	102-500 Coverage
Filesystem management	Filesystem creation, mounting, FHS	Filesystem (continued)
User management	Basic user/group commands	PAM, password policies, quotas
Process management	ps, top, kill, nice	Service management (systemd)
Locales	Basic locale config	Advanced localization

The overlap means studying for one prepares you for some of the other — but not enough to skip deliberate preparation for each exam.

Should You Take Both Exams on the Same Day?

Approach	Pros	Cons
Same day	Saves travel time, material stays fresh, one registration process	Mental fatigue, higher risk of second-exam slump
Weeks apart	More focused prep per exam, time to reinforce weak areas	Need to re-review material after gap, two separate registration fees (same cost)

Our recommendation: Take them 2–3 weeks apart. Use the first exam's result to focus your remaining study on weak areas. If you score 85%+ on the first practice exam, same-day is a viable option.

Study Strategy by Exam

For 101-500 (weeks 1–5)

Hands-on terminal work — 101-500 is the more practical exam. Read a topic, then run the commands.
Master the 3 heavy topics — GNU/Unix Commands (25%), Filesystems (22%), Package Management (18%). These are 65% of the exam.
Filesystem lab — Create partitions, build filesystems, mount them, break them, repair them. This is the most common failure area.
Process management — Understand zombie processes, signals, priorities, and job control thoroughly.

For 102-500 (weeks 6–10)

Build a network lab — At least two VMs so you can practice SSH, DNS, routing, and firewall rules.
Scripting practice — Write 15–20 bash scripts solving real problems (log rotation, backup automation, user provisioning).
Security drill — Configure PAM limits, set up iptables rules, create certificate authorities with GnuPG.
Service configuration — Practice setting up NTP, CUPS, and a syslog server from scratch. These are common exam scenarios.

Practice Checklist

Use this checklist to gauge readiness for each exam:

Ready for 101-500 when you can:

Boot a Linux system into single-user mode and fix a broken GRUB config
Create, resize, and repair ext4 and XFS filesystems
Configure apt repositories, install packages, and resolve dependency issues
Use grep, sed, awk, and find with complex regex patterns
Explain every field in ls -l output, including SELinux context

Ready for 102-500 when you can:

Write a bash script with functions, loops, and error handling
Configure PAM to enforce password complexity and account lockout
Set up a simple firewall with nftables that allows SSH and web traffic
Diagnose DNS resolution failures using dig, nslookup, and strace
Set up an NTP client and verify synchronization

Test your readiness. Our LPIC-1 practice platform offers timed simulations for both 101-500 and 102-500. Get domain-level analytics showing exactly which topics need more work. Start free →

Which Exam Leads to Better Career Outcomes?

Both are required for LPIC-1, but the skills map to different roles:

Exam	Skills Gained	Relevant Roles
101-500	System administration basics, command-line fluency	Junior sysadmin, helpdesk, support engineer
102-500	Networking, security, automation	Sysadmin, DevOps engineer, security analyst

Bottom line: 102-500 skills (scripting, networking, security) tend to command higher salaries because they're closer to DevOps and SRE roles. But without 101-500 foundations, those skills aren't useful.

Ready to put this knowledge to the test? Our LPI practice portal includes 200+ realistic questions covering LPIC-1, LPIC-2, LPIC-3, and DevOps Tools Engineer certifications. Study mode, timed exams, domain breakdowns, and weak-area analysis included.

Start Free Preview →