LFCA

LFCA Exam Details

Domain Weight Breakdown

About the LFCA Certification

The Linux Foundation Certified IT Associate (LFCA) is an entry-level, knowledge-based certification that validates foundational IT skills across Linux, system administration, cloud computing, security, DevOps, and networking. This certification is designed for individuals starting their IT career or those transitioning from other fields who want to demonstrate broad technical competency. The LFCA is a theory-based exam with no hands-on labs, making it accessible for beginners.

The exam covers five equally weighted domains at 20% each, providing a well-rounded assessment of IT fundamentals. Candidates who pass the LFCA are well-prepared to pursue more specialized certifications such as the LFCS (Linux Foundation Certified Sysadmin), KCNA (Kubernetes and Cloud Native Associate), or cloud provider certifications. The exam tests conceptual understanding rather than deep technical implementation.

Exam Tips

The LFCA covers a very broad range of IT topics at an introductory level. All five domains carry equal weight (20% each), so you cannot afford to skip any area. Focus on understanding fundamental concepts: know the Linux filesystem hierarchy, basic shell commands, user/group management, essential networking protocols, cloud service models (IaaS/PaaS/SaaS), and basic security principles. Since this is a knowledge-based exam, practice identifying correct definitions and explanations rather than memorizing commands. Study the OSI model, common ports, firewall concepts, and CI/CD pipeline stages.

Linux Distributions

Linux is an open-source operating system kernel created by Linus Torvalds in 1991. It powers servers, cloud infrastructure, smartphones (Android), embedded systems, and supercomputers. The kernel manages hardware resources and provides a stable interface for applications. A Linux distribution combines the kernel with a package manager, system utilities, desktop environment (optional), and software repositories.

Filesystem Hierarchy Standard (FHS)

Essential Shell Commands

File Permissions

Permissions are assigned to three categories: Owner (u), Group (g), and Others (o). The command chmod 755 file sets rwxr-xr-x (owner: full, group: read+execute, others: read+execute). Special permissions include SUID (4000), SGID (2000), and Sticky Bit (1000). The sticky bit on /tmp prevents users from deleting each other's files.

Exam tip: Know how to calculate numeric permissions by adding values: rwx = 4+2+1 = 7, rw- = 4+2+0 = 6, r-x = 4+0+1 = 5, r-- = 4+0+0 = 4. Common permissions: 755 (executables), 644 (regular files), 700 (private directories).

Linux Boot Process

The Linux boot process follows this sequence: BIOS/UEFI (firmware initialization, hardware detection) → Bootloader (GRUB2) (loads kernel and initramfs from disk) → Kernel (initializes hardware, mounts root filesystem) → Init System (systemd) (starts services and reaches target/runlevel). Systemd is the modern init system used by most distributions, replacing SysV init. It uses unit files to manage services, targets, mounts, and timers.

User & Group Management

Key files: /etc/passwd (user accounts), /etc/shadow (encrypted passwords), /etc/group (group definitions), /etc/sudoers (sudo privileges, edit with visudo). The root user has UID 0 and unrestricted access to the system.

systemd Service Management

Package Management

Process Management

Disk & Storage Management

LVM (Logical Volume Manager): Abstracts physical storage into flexible logical volumes. Components: Physical Volumes (PV) → Volume Groups (VG) → Logical Volumes (LV). LVM allows resizing, snapshots, and spanning volumes across multiple disks without downtime.

Exam tip: Understand the difference between filesystem types: ext4 (most common Linux default), XFS (high-performance, default on RHEL), Btrfs (copy-on-write, snapshots), and swap (virtual memory).

Cloud Service Models

Cloud Deployment Models

Virtualization & Containers

Hypervisor types: Type 1 (bare-metal, runs directly on hardware: VMware ESXi, KVM, Hyper-V) provides better performance. Type 2 (hosted, runs on OS: VirtualBox, VMware Workstation) is used for desktop virtualization.

Cloud Storage Types

Infrastructure as Code (IaC)

IaC manages infrastructure through machine-readable definition files rather than manual processes. This enables version control, reproducibility, consistency, and automation of infrastructure provisioning. Key tools include Terraform (multi-cloud, declarative), CloudFormation (AWS-specific), Ansible (configuration management), and Pulumi (uses programming languages).

Exam tip: Understand the key cloud concepts: elasticity (automatic scaling), high availability (multi-AZ/region), fault tolerance (self-healing), scalability (vertical vs horizontal), and the pay-as-you-go pricing model. Know the shared responsibility model where the cloud provider secures infrastructure and the customer secures their data and applications.

CIA Triad

Authentication & Authorization

Multi-Factor Authentication (MFA) combines two or more factors: something you know (password), something you have (security token, phone), and something you are (fingerprint, face). MFA significantly reduces the risk of account compromise even if passwords are leaked.

Encryption Types

TLS (Transport Layer Security) secures data in transit. Uses asymmetric encryption for key exchange during handshake, then symmetric encryption for fast data transfer. TLS certificates are issued by Certificate Authorities (CAs). HTTPS = HTTP + TLS on port 443.

Common Security Threats

Linux Security Controls

Exam tip: Understand the principle of least privilege: users should only have the minimum permissions needed to perform their duties. Know the difference between DAC (Discretionary Access Control, standard Linux permissions) and MAC (Mandatory Access Control, SELinux/AppArmor). Be familiar with firewall concepts: stateful vs stateless, inbound vs outbound rules, and default deny policies.

DevOps Principles & Culture

DevOps is a set of practices that combines software development (Dev) and IT operations (Ops) to shorten the development lifecycle while delivering features, fixes, and updates frequently and reliably. DevOps emphasizes collaboration, automation, continuous improvement, and customer focus.

Version Control with Git

OSI Model (7 Layers)

Essential Network Protocols & Ports

IP Addressing & Subnetting Basics

IPv4 uses 32-bit addresses (4.3 billion). IPv6 uses 128-bit addresses (virtually unlimited). CIDR notation (/24) indicates the number of network bits. Subnetting divides networks into smaller segments for security and efficiency. NAT (Network Address Translation) allows private IPs to access the internet through a single public IP.

Exam tip: Memorize the private IP ranges (10.x.x.x, 172.16-31.x.x, 192.168.x.x), loopback (127.0.0.1), and common ports (22, 53, 80, 443). Understand TCP vs UDP: TCP is connection-oriented with guaranteed delivery (3-way handshake); UDP is connectionless with no delivery guarantee but lower overhead. Know basic networking commands: ping, traceroute, netstat, ss, ip addr, nslookup, dig.