Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Day 1
Exam 201 Topics
Capacity Planning
- Monitoring CPU, memory, disk I/O, and network usage
- Essential tools: iostat, iotop, vmstat, netstat, ss, top, htop, sar
- Identifying performance bottlenecks and forecasting future resource requirements
- Introduction to monitoring solutions: Nagios, Icinga2, Cacti, MRTG, collectd
- Practical exercise: Analyze a system under heavy load and document findings
Linux Kernel
- Understanding kernel components and documentation resources
- Compiling a Linux kernel (utilizing make targets, menuconfig, bzImage)
- Managing kernel modules via DKMS
- Runtime management and troubleshooting of the kernel
- Configuring udev rules and managing devices
- Key tools: modprobe, lsmod, modinfo, dmesg, sysctl, udevadm
- Practical exercise: Compile and install a custom kernel module, and configure udev rules
System Startup
- Customizing system initialization using systemd and SysV init
- Navigating systemctl, systemd targets, and runlevels
- System recovery methods (GRUB2, GRUB Legacy, BIOS, and UEFI)
- Alternative bootloaders: SYSLINUX, PXELINUX, systemd-boot
- Essential utilities: grub-install, efibootmgr, initrd, initramfs
- Practical exercise: Recover a system with a corrupted bootloader and configure systemd units
Day 2
Exam 201 Topics
Filesystem and Devices
- Managing the Linux filesystem (fstab, UUIDs, systemd mount units)
- Filesystem maintenance for ext2/3/4, Btrfs, XFS, and ZFS awareness
- Advanced filesystem options: AutoFS, dm-crypt, LUKS
- Relevant tools: mkfs, fsck, tune2fs, btrfs, xfs_repair, blkid, cryptsetup
- Practical exercise: Configure AutoFS for network shares and encrypt a partition using LUKS
Advanced Storage Device Administration
- Setting up software RAID (RAID 0, 1, 5) with mdadm
- Managing storage device access (SATA, NVMe, iSCSI, SAN awareness)
- Logical Volume Manager (LVM) operations: creating, resizing, and snapshotting volumes
- Key utilities: mdadm, hdparm, nvme, iscsiadm, pvcreate, vgcreate, lvcreate
- Practical exercise: Set up a RAID 1 array and create and resize an LVM volume group
Networking Configuration
- Basic and advanced network setup (ip, ifconfig, IPv4, and IPv6)
- Network troubleshooting and configuring multi-homed devices
- Overview of NetworkManager capabilities
- Diagnostic tools: ip, ss, netstat, tcpdump, nmap, mtr, ping6, traceroute
- Practical exercise: Configure a multi-homed server and troubleshoot connectivity using tcpdump
Day 3
Exam 201 Topics
System Maintenance
- Compiling and installing software from source code (configure, make, make install)
- Backup strategies: tar, rsync, dd, with awareness of Amanda and Bacula
- Notifying users about system events (motd, wall, shutdown)
- Compression and transfer tools: gzip, bzip2, xz, tar, rsync, mt
- Practical exercise: Compile a package from source and configure automated backups with rsync
Exam 202 Topics
Domain Name Server
- Basic DNS server configuration using BIND 9
- Creating and managing DNS zones (forward and reverse)
- Securing DNS servers (chroot jail, TSIG, DNSSEC, DANE awareness)
- Introduction to alternative DNS software: dnsmasq, djbdns, PowerDNS
- Administration tools: rndc, named-checkconf, named-checkzone, dig, nslookup
- Practical exercise: Configure a BIND authoritative server and create forward and reverse zones
HTTP Services
- Basic Apache 2.4 configuration (virtual hosts, access control, mod_perl, PHP)
- Apache HTTPS setup (SSL/TLS, self-signed certificates, SNI)
- Implementing Squid as a caching proxy
- Deploying Nginx as a web server and reverse proxy
- Management tools: apachectl, openssl, squid, nginx
- Practical exercise: Configure Apache with HTTPS and virtual hosts, and set up Nginx as a reverse proxy
Day 4
Exam 202 Topics
File Sharing
- Samba 4 server configuration (standalone mode and Active Directory member)
- Configuring CIFS and printer shares
- NFS server setup, access restrictions, and security measures
- Utility tools: smbd, nmbd, smbclient, testparm, exportfs, showmount, rpcinfo
- Practical exercise: Configure a Samba share with AD integration and set up NFS with restricted access
Network Client Management
- DHCP server configuration (dhcpd, static leases, DHCPv6 awareness)
- PAM authentication and SSSD integration
- LDAP client operations (ldapsearch, ldapadd, ldappasswd)
- Configuring an OpenLDAP server (slapd, LDIF, access controls)
- Essential tools: dhcpd, radvd, pam.d, sssd, slapd, slapadd, slapcat
- Practical exercise: Configure OpenLDAP with PAM authentication and set up DHCP with static reservations
E-Mail Services
- Postfix configuration, TLS, aliases, and virtual domains
- Managing email delivery via Sieve (filter, sort, redirect)
- Dovecot IMAP and POP3 configuration with TLS
- Overview of alternative mail systems: sendmail, exim, procmail, Courier
- Tools: postfix, /etc/postfix/, dovecot, doveadm, doveconf
- Practical exercise: Configure Postfix with TLS and virtual domains, and set up Dovecot for IMAP access
Day 5
Exam 202 Topics
System Security
- iptables and ip6tables: NAT, port redirection, and IP forwarding
- FTP server management: vsftpd and Pure-FTPd (passive vs active FTP)
- SSH hardening: sshd_config, key management, and login restrictions
- Security utilities: nmap, fail2ban, OpenVAS, and Snort awareness
- OpenVPN: Configuring site-to-site and point-to-point VPNs
- Security tools: iptables, ip6tables, ssh, sshd, nmap, fail2ban, openvpn
- Practical exercise: Configure iptables with NAT, harden SSH settings, and establish an OpenVPN tunnel
Q&A and Exam Preparation
- Comprehensive review of all Exam 201 and 202 topics
- Addressing weak areas and answering participant questions
- Strategies and tips for exam success
Mock Exam and Final Review
- Mock Exam 201 simulation (60 questions, 90 minutes)
- Mock Exam 202 simulation (60 questions, 90 minutes)
- Analysis of incorrect answers and key concepts
- Final recommendations for scheduling the actual exams
Requirements
Participants must hold an active LPIC-1 certification or possess equivalent Linux administration experience.
35 Hours
