F5-402 study guide
F5-402 · Work through your exam, one topic at a time.
This independent study page provides practice for F5-402. Its editorial learning areas include F5 cloud architecture, declarations and operational control; BIG-IP LTM listeners, persistence and TLS boundaries; BIG-IP application security, access and DNS decisions; BIG-IP TMOS operation, configuration and recovery evidence; Application-delivery paths, health and state; Identity, access and cryptographic protection; Network boundaries and protected communication; Security operations, monitoring and response; Continuity, backup and technical recovery. The F5-402 study guide has 9 sections and about 4,843 words.
01F5 cloud architecture, declarations and operational control
A BIG-IP virtual edition in a cloud environment still depends on its supported image, networking, identity, capacity and configuration. Provider-managed infrastructure does not automatically make the application-delivery configuration a fully managed service.
404 words, about 2 min02BIG-IP LTM listeners, persistence and TLS boundaries
In the supplied LTM model a virtual server accepts matching client traffic and applies the configured profiles and processing. A pool groups destinations, and a pool member identifies an address/service combination.
410 words, about 2 min03BIG-IP application security, access and DNS decisions
Application-layer request protection, user access decisions and network-layer filtering address related but different conditions. ASM and Advanced WAF are related F5 application-security offerings with version and feature distinctions; treating them as an identical rename can conceal important compatibility and licensing differences.
419 words, about 2 min04BIG-IP TMOS operation, configuration and recovery evidence
In the classic BIG-IP architecture, the Traffic Management Microkernel is central to traffic processing, while management and configuration components have different roles. Avoid assuming that every platform generation uses one identical host-kernel implementation or that a management address is interchangeable with a traffic VLAN.
390 words, about 2 min05Application-delivery paths, health and state
An application-delivery design connects a client-facing service to an appropriate application endpoint. In a full-proxy arrangement the device has distinct client-side and server-side connection contexts.
400 words, about 2 min06Identity, access and cryptographic protection
This domain tests the identity lifecycle and the mechanisms that turn an identity into an authorised action. Expect questions that separate authentication from authorisation and that ask which access control model fits a scenario.
857 words, about 4 min07Network boundaries and protected communication
This domain tests perimeter architecture and the device behaviour that makes segmentation real. Questions tend to be scenario-based: where a host belongs, which rule is needed, and what a given protocol actually protects.
430 words, about 2 min08Security operations, monitoring and response
This domain is about running security as a repeatable service rather than a series of heroic acts. Questions target process ownership, change control and the operational metrics that show the programme is working.
803 words, about 4 min09Continuity, backup and technical recovery
This domain tests continuity planning: how an organisation keeps critical services running during disruption and how it recovers afterwards. Distinguish the continuity plan from the disaster recovery plan and know the time-based metrics precisely.
730 words, about 4 min