LPI Security Essentials study guide
LPI Security Essentials · Work through your exam, one topic at a time.
LPI Security Essentials (exam code 020-100, current version 1.0) is a vendor-neutral entry-level certificate from the Linux Professional Institute that validates basic competence in protecting data, devices, networks and identities. It is aimed at people who have completed a first course in IT security, at staff and members of organizations that want to raise their security awareness, and at individuals who want a working grasp of secure use of information technology. The LPI Security Essentials study guide has 5 sections and about 1,630 words.
01Security Concepts
Security Concepts is the framing domain: it tests whether you can name the components of risk and map controls to them, rather than just listing attacks. LPI expects vendor-neutral vocabulary-asset, threat, vulnerability, exposure, risk, control-and the CIA triad: confidentiality, integrity, availability.
335 words, about 2 min02Encryption
Encryption is a core domain and tests practical judgment: which primitive for which job, and where key management fails. Know the split between symmetric algorithms (AES, ChaCha20) for bulk data, asymmetric algorithms (RSA, ECC/ECDSA, ECDH) for key exchange and signatures, and cryptographic hashes (SHA-256, SHA-3) for integrity-not confidentiality.
341 words, about 2 min03Node, Device and Storage Security
Node security covers the endpoint-laptops, servers, phones, and attached storage-and asks how you harden, patch, encrypt, back up, and retire it. Controls are layered: firmware/UEFI Secure Boot, OS updates, least-privilege accounts, host firewall, application allowlisting or sandboxing (SELinux, AppArmor), endpoint protection, and full-disk encryption.
341 words, about 2 min04Network and Service Security
Network and service security tests whether you can reduce attack surface and segment trust. Know TCP/IP basics-IP addresses, ports, the TCP handshake, UDP-and how firewalls filter by state, port, and address.
307 words, about 2 min05Identity and Privacy
Identity and privacy covers authentication, authorization, and the data-protection duties around personal information. Distinguish authentication (who you are), authorization (what you may do), and accounting/audit (what you did).
306 words, about 2 min