System architecture
System architecture covers hardware discovery, kernel modules, the boot sequence from firmware to the first userspace process, and how you change runlevels or systemd targets and shut the machine down. Objective 101 of LPIC-1 Exam 101-500, worth 13.33% of the exam.
- Share of the exam
- 13.33%
- Questions in a real sitting
- roughly 8 of 60
- Questions in this bank
- 40
- Signed for by a person
- 0
- Machine-checked only
- 40
Partly checked. None of the 40 questions here has been read against the cited source by a person. 40 questions have been checked against their cited clause by an automated pass — which is not the same thing, and is not a signature.
Only questions a person has signed for are used in mock exams here. That is the whole difference between the two kinds of checking above.
How these questions are written — where each question comes from, what the verification ledger records, and what happens when one is found wrong.
What this objective covers
The 40 questions written for this objective cite 3 LPI exam objectives (101.1, 101.2, 101.3) and 24 manual pages (acpid(8), boot(7), bootparam(7), depmod(8), dmesg(1), dracut(8), efibootmgr(8), grub-mkconfig(8), hier(7), initrd(4), inittab(5), journalctl(1), journald.conf(5), lsmod(8), lsusb(8), modprobe.d(5), proc(5), shutdown(8), systemctl(1), systemd-analyze(1), systemd.kill(5), systemd.special(7), systemd.unit(5), wall(1)).
They break down as 28 single-answer questions, 6 choose-several questions and 6 type-the-answer questions.
What this objective is really about
Three loosely related areas sit under one heading: what hardware the machine has and how the kernel knows about it, how the machine gets from power-on to a login prompt, and how you move it between operating states. The exam tests these mostly through command recognition, so the fastest route to marks is knowing exactly which tool answers which question.
Hardware and modules
Four module commands, four distinct jobs, and questions here almost always turn on telling them apart. modinfo describes a module by reading the file itself, so it works on modules that are not loaded and is how you discover the parameters a driver accepts. lsmod lists what is loaded right now, formatting /proc/modules. modprobe loads and unloads with dependency handling — modprobe -r removes a module and then the dependencies left unused. depmod rebuilds the dependency index that modprobe consults. insmod and rmmod are the low-level pair that act on exactly one module and take a file path rather than a name.
For buses, lspci and lsusb list PCI and USB devices. The lspci option worth memorising is -n, which prints numeric vendor and device IDs instead of looking them up in the ID database. For device events, udevadm monitor watches kernel and udev events live, udevadm info queries one device's attributes, and udevadm trigger re-emits events so new rules apply without a reboot.
/proc and /sys are both virtual filesystems generated in memory. /proc is older and process-centric with a grab bag of system information, and /proc/sys is the sysctl interface where writing a value changes a kernel tunable until reboot. /sys is the structured view of the kernel device model that udev is built on.
Boot and init
The BIOS chain runs: firmware self-test, boot device selection, boot loader code in the master boot record, boot loader loads the kernel and initramfs, kernel initialises hardware and mounts root, kernel starts PID 1. UEFI differs at the front — the firmware understands the FAT EFI system partition and loads a boot loader file directly, so no MBR code is involved.
On systemd, systemd.unit= on the kernel command line chooses the initial target for one boot, which is how you reach rescue.target or emergency.target for maintenance. That is separate from systemctl set-default, which rewrites the default.target symlink for every subsequent boot, and separate again from systemctl isolate, which changes the running system immediately. Keeping those three apart is worth a mark or two.
For boot messages, dmesg reads the kernel ring buffer, which lives in memory and is empty at every boot. journalctl can go further back if the journal is persistent: -b selects a boot, -b -1 the previous one, and -k restricts output to kernel messages.
Lessons in this objective
The objective cut into the pieces the blueprint declares. Each one has the material written out and the questions that test it.
- Determining and configuring hardware settings
- Booting the system
- Boot targets, shutting down and rebooting
Drill this objective
The trainer can run a short practice set drawn from this objective alone, which is what the weight column above is for: revise the heavy objectives first.
Questions on this objective (page 1 of 2)
- You have a module file for a network driver on disk but the driver is not loaded. Which command reports the module's description, license, its dependencies and the parameters it accepts, without loading it into the kernel? machine-checked
- A module was loaded together with several modules it depends on. Which command unloads that module and then also unloads the dependencies that are left with a use count of zero? machine-checked
- You are filing a hardware bug report and the maintainer asks for the raw PCI vendor and device ID numbers rather than the human-readable names lspci normally prints. Which lspci option produces the numeric IDs? machine-checked
- A USB device is not getting the device node you expect. You want to watch, live, the kernel uevents and the resulting udev events as you unplug and replug it. Which command does that? machine-checked
- On a traditional BIOS PC, the firmware has completed its power-on self test and selected the hard disk as the boot device. What happens next? machine-checked
- A systemd-based machine fails during a normal boot because a service hangs. At the boot loader menu you want to edit the kernel command line for this one boot so the system comes up in single-user rescue mode instead. Which parameter do you append? machine-checked
- A systemd server with a persistent journal rebooted overnight. You need the log messages from the boot that ended in that reboot, not from the current boot. Which command shows them? machine-checked
- A systemd machine currently boots into the graphical target. You want every future boot to stop at the multi-user (text) target, and you do not want to change the running system right now. Which command do you use? machine-checked
- As root you want the machine to reboot in five minutes, with logged-in users warned now. Which command does that? machine-checked
- On a classic SysVinit system, which command prints the previous and the current runlevel, for example the output line 'N 3'? machine-checked
- Which THREE of these statements about the /proc and /sys pseudo-filesystems are true? machine-checked
- On a machine running systemd, which TWO of these commands will power the machine off? machine-checked
- Which THREE of the following have been used on Linux as the init system, that is the first userspace process the kernel starts as PID 1? machine-checked
- Type the command, with no options or arguments, that lists the kernel modules currently loaded, one per line, with each module's size and use count. machine-checked
- Type the command, with no options, that lists the devices currently attached to the system's USB buses. machine-checked
- On a systemd system, type the journalctl command that restricts the output to kernel messages from the current boot. machine-checked
- A network interface driver must always be loaded with the parameter InterruptThrottleRate=1, and the setting has to survive a reboot. Where do you record it? machine-checked
- A vendor asks you to confirm which interrupt line a capture card is using and how many interrupts it has taken since boot. Which file gives you both figures? machine-checked
- You have copied a new .ko module into /lib/modules/$(uname -r)/extra/ and modprobe still reports that the module is not found. Type the command, run as root, that rebuilds the module dependency database (modules.dep and its map files) for the running kernel. machine-checked
- A UEFI machine has two installed distributions. The firmware currently starts the older one first, and you want the newly installed entry to be tried first from now on, without touching the firmware setup screen. Which tool changes the boot order? machine-checked
The other objectives in LPIC-1 Exam 101-500
- 102. Linux installation and package management — 18.33% of the exam
- 103. GNU and Unix commands — 43.33% of the exam
- 104. Devices, Linux filesystems, filesystem hierarchy standard — 25% of the exam