F5-302
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
F5-302 is a BIG-IP administrator certification exam offered by F5, aimed at network, security, and platform engineers who deploy and operate BIG-IP Application Delivery Controllers in production. It suits candidates who already understand load balancing concepts and want formal recognition of hands-on TMOS skills, and it is often taken by people supporting application delivery, web security, and DNS services in enterprise or service-provider environments. The exam samples the full operational surface of TMOS rather than a single product: traffic management and virtual server behaviour, Local Traffic Manager profiles and persistence, application security with ASM, access control with APM, DNS and Global Traffic Manager, analytics and monitoring, and structured troubleshooting. Expect scenario-style items that ask you to interpret configuration behaviour, choose the right profile or policy, or diagnose why traffic is not flowing as intended. Preparation should be practical: build a lab (virtual edition is enough), configure virtual servers, pools, monitors, persistence, iRules basics, security policies, and GTM/DNS listeners, then break them deliberately and practise reading logs, statistics, and packet captures. Pair lab work with F5's official documentation and training catalogue, and confirm current exam logistics on F5's certification site, since that is where the official body publishes the current format, duration, pricing, and passing requirements. This page is independent study material and is not affiliated with or endorsed by F5.
What you'll study
About F5-302 preparation
What is the F5-302 exam actually testing?
It tests operational competence across TMOS: traffic management, LTM configuration, application security, access policy, DNS/GTM, analytics, and troubleshooting. Items are scenario-based, so you need to reason about configuration behaviour rather than recall menu paths. Expect questions where two answers look plausible and the difference is a profile setting, a monitor state, or an order-of-operations detail.
How long is the exam and how many questions are there?
Those details change over time, so this page does not quote them. F5 publishes the current question count, time limit, and appointment length on its official certification pages. Check there before you book, and note whether your delivery is at a test centre or online proctored, because the check-in process differs.
What score do I need to pass?
The passing standard is set by F5 and is not a fixed percentage you can calculate from raw correct answers; scaled scoring is common. Confirm the current requirement on F5's certification site rather than relying on forum claims. Treat any practice score as a rough signal only, and aim for consistent strength across all domains, not a bare margin.
How hard is it compared with entry-level certifications?
It assumes real familiarity with BIG-IP. Candidates who have only read documentation often struggle with troubleshooting and security items, while people who administer devices daily usually find the traffic management and LTM sections comfortable. The hardest parts are typically ASM policy behaviour, APM access flows, and multi-layer diagnosis where the fault could sit in a monitor, a persistence profile, or a route.
If I fail, can I retake it, and how soon?
Retake rules, waiting periods, and any fees are set by F5 and its testing partner, and they can change. Check the official certification site for the current policy before scheduling a second attempt. In practice, use the score report's domain breakdown to target weak areas rather than immediately rebooking and hoping for different questions.
What study order do you recommend?
Start with traffic management and LTM, because everything else assumes you understand virtual servers, pools, monitors, and persistence. Then move to ASM and APM, where policy and access flows build on that foundation. Do DNS/GTM next, then analytics and monitoring, and finish with troubleshooting, revisiting earlier topics through failure scenarios rather than rereading them.
Can I prepare with only documentation and no lab?
It is possible but inefficient. Many exam items describe a symptom and ask for the cause, which rewards having actually watched a pool member go down, seen a persistence entry expire, or traced a request through an access policy. A virtual lab on a laptop covers most objectives; the goal is deliberate breakage and recovery, not just successful configuration.
What are the most common ways candidates lose marks?
Confusing similar profiles and their defaults, forgetting that monitor and persistence behaviour depends on context, misreading which layer a security or access failure occurs at, and guessing on troubleshooting items instead of working through a structured isolation method. Another frequent problem is uneven preparation: strong LTM knowledge cannot compensate for weak ASM or GTM sections given how the domains are weighted.
Does this page or my study group make me F5 certified?
No. Only passing the official exam through F5's certification programme confers the credential, and this page is independent study material with no affiliation, endorsement, or partnership. Always verify eligibility, registration steps, and any recertification requirements directly with F5, since those administrative details are outside the scope of what this guide can confirm.