F5-401 Security Expert study guide
F5-401 Security Expert · Work through your exam, one topic at a time.
The F5 Certified Professionals program is F5's professional certification track, described by F5 as progressive, with higher level certifications building on the skills and knowledge demonstrated in previous certifications. It offers options emphasizing Administration, Sales, Product Specializations, and Solutions including Cloud and Security. The F5-401 Security Expert study guide has 6 sections and about 2,514 words.
01Application and API Security Architecture
This domain is about architecture judgement, not product screens: given web UIs, REST/GraphQL APIs and service-to-service calls, can you place authentication, authorization, schema validation and inspection at the tier where each actually works, and explain why a control placed higher or lower fails? Negative vs positive security.
450 words, about 2 min02Web Application and API Protection (WAF, API Security, Bot Management, DDoS)
Operational command of WAAP controls on F5 BIG-IP Advanced WAF/ASM and F5 Distributed Cloud: how a policy moves from learning to blocking, how APIs are protected beyond signatures, how bots are separated from humans and good scripts, and how denial-of-service is absorbed at the right layer. Deploy a policy in transparent mode, use learning suggestions and traffic baselines to shrink false positives, then move to blocking.
410 words, about 2 min03Zero Trust Access and Network Security
Whether you can replace network-location trust with identity-and-context-based access, using F5 BIG-IP Access Policy Manager (APM) and F5 Distributed Cloud capabilities, and whether you can explain what makes an access decision continuous rather than a one-time gate. Verify explicitly (every request authenticated and authorized from available signals), grant least privilege (just-in-time, per-application), and assume breach (segment, log, and limit blast radius).
394 words, about 2 min04SSL/TLS Orchestration and Post-Quantum Cryptography
How you centralize TLS decryption and re-encryption for inspection, how you decide what not to decrypt, and how you plan cryptographic migration as post-quantum algorithms enter TLS. SSL Orchestrator role.
395 words, about 2 min05AI Security: AI Gateway, AI Guardrails, Workforce AI Security
How you control traffic to and from large language models, inspect what goes in and comes out, and govern employee use of AI tools. The exam expects you to distinguish the three control surfaces and to know which risk each one actually reduces.
425 words, about 2 min06Security Deployment, Operations and Troubleshooting on BIG-IP and Distributed Cloud
How security services are deployed repeatably and how failures are isolated quickly across BIG-IP and F5 Distributed Cloud, without changing five variables at once and hoping. Declarative deployment.
440 words, about 2 min