CTLA study guide
CTLA · Work through your exam, one topic at a time.
The CTLA credential is aimed at Linux administrators who want independent evidence that they can run and support real systems rather than recite commands. It is a multiple-choice exam organized around eight weighted domains: Linux system administration (20%), shell scripting and command-line tools (15%), networking fundamentals and configuration (15%), security fundamentals and system hardening (15%), storage, filesystems and backup (10%), service management and process control (10%), virtualization and cloud concepts (10%), and troubleshooting and operational procedures (5%). The CTLA study guide has 8 sections and about 3,974 words.
01Linux System Administration
The Linux System Administration domain tests whether you can operate a running host without a GUI: reading and changing filesystem state, managing accounts and permissions, and knowing which file is authoritative for a given setting. CTLA items here are scenario-shaped - a permission surprise, a user who cannot log in - so knowing where state lives matters as much as knowing the command.
459 words, about 2 min02Shell Scripting and Command-Line Tools
This domain checks whether you can build a script that behaves correctly under real input - spaces in filenames, failing commands, empty variables - and whether you can pick the right text-processing tool rather than hand-rolling loops. Expect questions about quoting, exit status propagation, redirection order, and safe use of find / xargs / awk / sed .
496 words, about 2 min03Networking Fundamentals and Configuration
The networking domain tests layered reasoning: can you tell whether a failure is link, address, route, name resolution, listening socket, or policy? CTLA expects fluency with IPv4 addressing and CIDR, the iproute2 toolset, DNS resolution order, and host firewall concepts on current Linux distributions.
480 words, about 2 min04Security Fundamentals and System Hardening
This domain tests defensive configuration: least privilege, remote access control, mandatory access control, auditing, and knowing which mitigation addresses which threat. CTLA questions usually present a service that broke after a hardening step, or ask you to choose the control that satisfies a stated requirement.
504 words, about 3 min05Storage, Filesystems, and Backup
This domain tests the storage stack from block device to mounted filesystem, plus the backup habits that protect it. Expect questions on partitioning and LVM, /etc/fstab correctness, the difference between df and du , and why a snapshot is not automatically a backup.
473 words, about 2 min06Service Management and Process Control
This domain covers systemd as the service and dependency manager, the journal as its logging backend, and the process primitives underneath: signals, priorities, and scheduling. CTLA items typically ask why a configuration change had no effect, or how to make a service start at boot and restart on failure.
485 words, about 2 min07Virtualization and Cloud Concepts
This domain tests the boundary between the machine and what runs on it: hypervisors versus container runtimes, image versus instance, and the cloud primitives that replace racking hardware. CTLA questions tend to be conceptual traps - "the container lost its data", "the instance is unreachable" - rather than deep vendor detail.
534 words, about 3 min08Troubleshooting and Operational Procedures
The final domain tests method rather than trivia: given a symptom, do you gather evidence before changing anything, isolate the failing layer, change one variable, and leave a record? CTLA items here are often "what should you do first" or "which tool confirms this hypothesis", so the choice of next action carries the marks.
543 words, about 3 min