Linux Foundation Certified System Administrator Concepts Exam Prep
Review LFCS concepts with 34 unofficial multiple-choice questions and source-linked explanations before separate hands-on Linux practice.Exam preparation
{{ summaryLine }}
{{ examIssue }}
{{ examSetupValidation }}
{{ progressStatusLine }}
Question {{ examCursor + 1 }} of {{ questionCount }}
{{ currentQuestion.stem }}
{{ currentQuestion.accessible_clue }}
{{ currentResultRow.feedback }}
{{ currentResultRow.explanation }}
Source: {{ currentResultRow.source.reference }} · {{ currentResultRow.source.version }} · {{ currentResultRow.source.license }}
Review this practice round
{{ resultLead }}
{{ resolvedTargetLabel }}
Readiness review
{{ readinessReviewTitle }}
{{ readinessReviewLine }}
Unofficial, independently authored concept practice. The official LFCS exam is performance-based; these multiple-choice questions do not test command execution, troubleshooting speed or hands-on competence. The score describes only this authored round and cannot predict passing.
Next, use the source links to revisit each missed concept, then practise the corresponding operations in an authorized hands-on lab. Repeat verification and recovery, not just answer recall.
Missed answer review
-
{{ item.prompt }}
Your answer: {{ item.selected_answer_label }}
Correct answer: {{ item.correct_answer_label }}
{{ item.explanation }}
Source: {{ item.source.label }} · {{ item.source.version }} · {{ item.source.license }}
Domain performance
Correct and missed answers in the domains sampled by this round. Counts are practice results, not official scores or readiness estimates.
Not sampled: {{ unsampledDomains.join('; ') }}. No performance conclusion is available for these domains.
Loading domain-performance chart…
{{ examChartExportStatus }}
Answer ledger
{{ examLedgerExportStatus }}
| Question ID | Prompt | Domain | Your answer | Correct answer | Outcome | Explanation | Source | Copy |
|---|---|---|---|---|---|---|---|---|
| {{ row.question_id }} | {{ row.prompt }} | {{ row.category_label }} | {{ row.selected_answer_label }} | {{ row.correct_answer_label }} | {{ row.outcome_label }} | {{ row.explanation }} | {{ row.source.label }} · {{ row.source.version }} · {{ row.source.license }}— |
A Linux service can work after a manual start and still fail to return after a reboot. Restoring the running process solves the immediate interruption, but a durable fix also depends on how the service is configured to start later. Linux system administration repeatedly requires this distinction between the state observed now and the configuration that should recreate it.
The Linux Foundation Certified System Administrator (LFCS) certification assesses practical administration through command-line tasks. The official exam is a proctored, two-hour performance examination, not a multiple-choice knowledge test. Its distribution-agnostic objectives cover operations, networking, storage, essential commands, and users and groups. There is no formal prerequisite, but answering questions about commands is different from carrying out a repair on a Linux host.
Several terms help explain why a command that looks appropriate may not finish the job.
- Runtime state
- What is active or effective in the running system, such as a service that has started or a kernel setting that has been changed for the current boot.
- Persistent configuration
- Saved settings used to establish the intended behavior again. A change made only at runtime may disappear when the relevant system or service is restarted.
- Effective access
- The access actually permitted after the applicable rules are considered. A permission recorded for a named user can be restricted by another rule, such as an access control list mask.
These distinctions matter when investigating an application outage, preparing a replacement server, expanding storage, or changing who can use a resource. A larger storage device does not necessarily mean its filesystem has grown. Likewise, a network application needs more than a running process before another machine can reach it. Diagnosis involves finding which condition is missing rather than applying every plausible command.
Distribution-agnostic study still requires attention to the environment. A question that explicitly names APT concerns that software-management system. A service question that names systemd assumes its service-management rules. Those examples do not establish an official Linux distribution or release for LFCS. The available commands, filesystem type, active management services, and requested persistence determine which procedure fits a particular host.
Concept review is useful for separating similar operations and explaining why a tempting alternative is wrong. Hands-on practice adds the work that recognition cannot demonstrate: identifying the correct host and resource, performing the change, observing the result, and recovering from an unsuccessful attempt. Repeating a familiar answer does not establish that those operations can be completed under an examination's time constraints.
Administrative practice also needs a safe environment. Formatting a device and checking an existing filesystem are different operations, with different risks to stored data. Experiments involving storage, boot behavior, or access controls belong on authorized lab systems with recoverable data and a way to regain access. A study result does not establish competence to make the same change on a production system.
How to Use This Tool:
Use an untimed round to find concepts that need further study before separate hands-on work. The questions are independently authored, unofficial practice, not official examination content or a Linux Foundation endorsement.
-
Choose whether to require a particular curriculum snapshot. Leave Required curriculum snapshot date (optional) blank to use the available outline, or enter 2026-09-13 to require that exact snapshot. This is a local study-content date, not your examination date or a provider edition or effective date.
A different date, an impossible date, conflicting requirements, or an incompatible saved attempt can block practice. Pin available target sets the requirement to 2026-09-13. Use available target removes the requirement. Both clear the saved attempt so you can start again; incompatible saved answers cannot be migrated.
-
Select a Domain, then choose All practice, Concept review, or Command reasoning. Keep All levels for both difficulty types. Core concepts emphasizes a single rule, while Applied reasoning combines conditions or diagnosis. These are local study labels, not calibrated official difficulty levels.
Some filter combinations contain no questions. For example, Networking with Concept review and Applied reasoning cannot start. Choose All levels or broaden Practice to include command reasoning.
- Choose the round length and feedback timing. The unfiltered All domains selection offers 5, 10, 20, or 34 questions and starts at 10. Focused selections have smaller count menus, so check Question count after changing filters. The default After each answer setting shows the correction immediately; At the end withholds corrections until the final review. Under Advanced, a Replay seed must contain 1 to 128 characters and cannot be blank.
- Select Start exam practice, read the stated environment, and choose one of the four answers. Selecting an answer submits and locks it immediately in either feedback mode. There is no separate submission step or opportunity to revise that answer within the round.
- Select Next question after each response and View results after the last one. Review the Answer ledger for the selected answer, correct answer, explanation, and supporting source. With deferred feedback, this is where corrections first become available.
- Select Retry missed to concentrate on incorrect answers, Replay same seed to repeat the round, or Try a new seed to draw again. Change setup clears the attempt and returns to the filters. Use the missed explanations to choose the corresponding operations to practise in an authorized lab.
Interpreting Results:
The headline changes meaning during a round. While answering, it reports how many questions have been answered. In the final review, it reports how many were correct out of the total. An answered question is not necessarily a correct one, and reaching 100% progress means the round is complete rather than error-free.
Readiness review is a study-review heading, not a validated readiness assessment. A Perfect round means every selected answer matched its authored key. It does not measure command execution, troubleshooting speed, recovery skill, or the probability of passing LFCS. There is no official scaled score, pass/fail cutoff, certificate, or professional-competence judgment.
Domain performance shows correct and missed counts only for domains included in that round. A longer bar can simply mean more questions were selected from that domain. Domains listed as Not sampled are untested, not areas of strength or weakness. For a useful comparison between attempts, keep the domain, practice type, difficulty, question count, and feedback timing consistent.
Treat each missed answer as a specific study lead. Explain why the correct choice satisfies the question's stated conditions, then verify the corresponding behavior in a lab. A correct guess or recognition of a repeated question deserves the same hands-on check before drawing a broader conclusion.
Technical Details:
Linux command reasoning depends on the requested outcome and the conditions under which a command operates. Current activation, saved configuration, filesystem capacity, and effective permissions are different things to verify. A multiple-choice score records recognition of the authored answer to a stated situation; it does not verify the resulting state of a Linux system.
Points and completion measure different things
Each question has one correct choice and three authored alternatives. A correct response earns 1 point and an incorrect response earns 0, with no partial credit or negative marking. Let N be the positive number of questions in the round, A the number answered, and C the number answered correctly. The percentage score uses all N questions, while progress uses the number answered.
Possible points equal N, so the score ranges from 0 to N points. Unanswered questions remain in the percentage denominator but are not counted as incorrect. Missed answers are the answered questions that were wrong. Raw accuracy and displayed progress are unrounded. The final headline retains exact integer counts rather than an official or calibrated score.
| Round condition | Review meaning |
|---|---|
| A < N | The round is unfinished. Unanswered questions are not missed answers, and the final review is not ready. |
| A = N and C < N | The completed review says Start with the missed answers. |
| A = N and C = N | The completed review says Perfect round. This is not an LFCS pass result. |
Question selection and curriculum coverage
The saved outline is the local 13 September 2026 snapshot of the distribution-agnostic LFCS objectives. The collection declares one original concept scenario per admitted objective, giving 34 scenarios across five domains. Individual scenarios check selected concepts rather than every skill within a broader objective. The provider's domain weights and the number of authored questions are distinct.
| Domain | Official weight | Practice questions | Examples in the collection |
|---|---|---|---|
| Operations Deployment | 25% | 8 | Persistent settings, services, recovery, virtual machines, containers |
| Networking | 25% | 8 | Addresses, time synchronization, listeners, remote access, routing |
| Storage | 20% | 7 | Logical volumes, mounts, filesystems, swap, storage performance |
| Essential Commands | 20% | 6 | Git staging, service configuration, logs, limits, certificates |
| Users and Groups | 10% | 5 | Memberships, shell profiles, resource limits, access rules, identity services |
Selection is uniform without replacement within the chosen set. No question repeats within a round, but there are no official domain quotas or score weights. Selecting All domains makes all domains eligible; a short draw need not include every one. Smaller filtered sets can represent only a narrow part of a domain.
A replay seed determines the question and option order for unchanged settings and an unchanged question collection. A new seed can include previously seen questions. When a round includes its entire eligible set, another seed can change the order but cannot supply unseen questions. Reproducibility is not a guarantee that an old saved attempt will remain compatible after content or saved-attempt formats change.
Current activation and persistent configuration
For systemd services, starting and enabling have separate effects. The following commands illustrate the distinction for a service with valid installation settings.
| Command | Current activation | Later activation configuration |
|---|---|---|
systemctl start backup.service |
Requests activation now | Does not enable the service |
systemctl enable backup.service |
Does not itself start the service | Creates the unit's installation links |
systemctl enable --now backup.service |
Also requests activation now | Creates the unit's installation links |
An enabled service can still be inactive or fail when started. systemctl is-active and systemctl is-enabled inspect different states; neither alone proves that an application performs its intended function.
Kernel parameters have a related persistence requirement. On a host using systemd-sysctl, a runtime change affects the running kernel, while suitable /etc/sysctl.d/*.conf entries supply values during boot. The parameter must exist when settings are applied, and later configuration can override an earlier value. Verification therefore concerns the effective value as well as the saved text.
Storage capacity, filesystem state, and repair
Logical Volume Manager (LVM) allocates storage to logical volumes. Enlarging a logical volume changes the available block-device size, but a filesystem on it may still require its own supported growth operation. A supported lvextend --resizefs workflow can coordinate both changes. The filesystem type, available volume-group space, backups, and support for growth while mounted determine the appropriate procedure.
Available data blocks are not the only capacity constraint. Inodes are filesystem records used to represent files, and exhausting them can prevent new file creation even when data space remains. GNU df -i reports inode use instead of block use. That is a different diagnostic question from enlarging a volume.
Formatting and repair must also remain distinct. mke2fs -t ext4 creates a filesystem and can destroy prior content; it is not a repair command. For suspected ext4 damage, e2fsck generally requires an unmounted filesystem. Its restricted read-only checking exception does not make results from a mounted filesystem valid. Protect recoverable data and arrange maintenance or rescue access before attempting repair.
Reachability and effective access
Transmission Control Protocol (TCP) troubleshooting often begins by checking whether the application is listening. In ss -ltn, -l selects listening sockets, -t selects TCP, and -n requests numeric output. The listening address matters as well as the port. A local listener does not by itself establish that an intended remote client can reach the application.
Remote-login policy needs equally precise reading. In OpenSSH, the Secure Shell (SSH) server setting PermitRootLogin prohibit-password disables password and keyboard-interactive authentication for root. It is not the same as PermitRootLogin no; permitted public-key authentication can still allow root access. Other authentication settings and key restrictions also apply.
In the Linux access control list (ACL) model used by these questions, the mask caps permissions granted through named-user, named-group, and owning-group entries. A named user's effective permissions are those allowed by both its entry and the mask. The mask does not limit the file-owner or other entries. This is why inspecting one apparently generous entry can give the wrong answer about access.
Identity services introduce a transport requirement. A password-based simple bind using the Lightweight Directory Access Protocol (LDAP) does not encrypt its credentials by itself. Properly verified Transport Layer Security (TLS), established before sending the password, can protect the connection. Encoding a password or changing the server port does not provide that protection, and certificate validation remains part of verifying the intended server.
Privacy Notes:
Scoring happens in your browser, but the attempt is also saved in the page address as you work. The address contains the information needed to restore the round and its selected answers. This data is encoded, not encrypted, so anyone with the complete address can restore a compatible attempt.
- Treat practice links as study records rather than private storage. Addresses can remain in browser history and can reach the site when opened or reloaded.
- Exported answer ledgers contain your responses. Share them only with people who should see that record.
- Chart and document features can load supporting resources through the network, and opening a reference visits another site. Browser scoring does not mean the entire experience is offline.
- No Linux credentials, account details, or confidential exam material are needed. Keep personal or secret information out of the replay seed.
Worked Examples:
Seven correct in a mixed round
Choose All domains, All practice, All levels, and 10 questions. Suppose seven answers are correct and three are incorrect. After all ten are answered, progress is 100%, while the completed score is 7/10, equivalent to 70% of the selected questions. Retry missed starts a round containing those three missed questions. A later 3/3 result shows successful review of that subset, not a new ten-question result or an LFCS passing score.
A named permission that does not allow writing
Select Users and Groups, Concept review, Applied reasoning, two questions, and After each answer. This set includes the scenario where alex has a named ACL entry of rw- and the mask is r--. Choosing read-and-write access is marked incorrect. Only read permission appears in both, so the effective permission from that entry is r--. The explanation identifies the mask as the restriction. In a lab, inspect the complete ACL before changing access rather than assuming the named entry acts alone.
References:
- Linux Foundation Certified System Administrator: domains and examination details, The Linux Foundation.
- systemctl(1): service activation and enablement, systemd project, Debian Manpages.
- sysctl.d(5): kernel parameters at boot, systemd project, Debian Manpages.
- lvextend(8): logical-volume and filesystem growth, LVM2 project, Debian Manpages.
- df(1): block and inode usage, GNU coreutils, Debian Manpages.
- mke2fs(8): creating ext-family filesystems, e2fsprogs project, Debian Manpages.
- e2fsck(8): filesystem checking and mounted-filesystem cautions, e2fsprogs project, Debian Manpages.
- ss(8): inspecting network sockets, iproute2 project, Debian Manpages.
- sshd_config(5): OpenSSH server authentication policy, OpenSSH project.
- acl(5): access control lists and effective permissions, Linux ACL documentation, Debian Manpages.
- OpenLDAP 2.6 Administrator's Guide: Security Considerations, OpenLDAP Foundation.
- OpenLDAP 2.6 Administrator's Guide: Using TLS, OpenLDAP Foundation.