F5-CA Exam Domains 2026: Complete Guide to All 5 Content Areas

Five Exams, Not Five Sections of One Test

The most common misunderstanding about this credential is structural. When people search for "F5-CA exam domains," they often expect a single exam divided into weighted sections, the way many vendor certifications are organized. The F5 Certified BIG-IP Administrator (F5-CA) works differently. Under the production blueprint (identifier F5-CAB.0425), each of the five domains is its own separately assessed, separately scheduled, separately scored exam: F5CAB1, F5CAB2, F5CAB3, F5CAB4, and F5CAB5.

That has real consequences for how you plan. You do not "balance" a weak domain against a strong one, because there is no combined score. Each exam stands alone against the same 245 threshold, and the credential is awarded only once all five have been passed. There is no combined initial credential examination to fall back on.

This guide walks through each of the five exams by its official name, describes the kinds of competence the blueprint expects, and suggests practical lab exercises. The blueprint's examples are illustrative rather than exhaustive, and it does not target version-specific BIG-IP features, so your preparation should center on durable concepts and hands-on skill rather than memorizing release notes.

Format, Fees, and Scoring Mechanics

Before diving into content, it helps to have the logistics straight, since they apply identically to every one of the five exams.

What the numbers mean in practice

Thirty questions in thirty minutes works out to roughly one minute per item. That is a brisk pace for scenario-flavored questions, so reading discipline matters. The "choose two" question style, confirmed in F5 staff's launch announcement and an April 28, 2025 clarification, rewards candidates who know a concept completely rather than recognizing one plausible phrase. Whether partial credit is awarded on those items was not verified, so assume you need both correct choices.

The scaled score deserves a note. A 245 on a 100-350 scale is not the same as answering 70 percent of questions correctly, and F5 does not publish a percent-correct equivalent. Provider-advertised "pass rates" and "approximately 80 percent" conversions are not issuer data. Our pages on the F5-CA passing score and the F5-CA pass rate go deeper on why those figures should be treated cautiously.

Cost-wise, one attempt at all five totals US$250 online or US$325 at test centers, before any retakes. See the full F5-CA certification cost breakdown for planning. Note also that a candidate registers in F5's certification program and accepts the candidate agreement; the production blueprint specifies no degree, fixed years of experience, or mandatory training hours, though practical BIG-IP competence is clearly expected. The F5-CA requirements article covers eligibility in more detail.

Domain 1: Install, Initial Configuration, and Upgrade

This is exam F5CAB1, officially titled "BIG-IP Administration Install, Initial Configuration, and Upgrade." It covers the work that happens before a single application is load balanced: getting a BIG-IP system running, reachable, licensed, and maintainable.

Hands-on practice here is straightforward and valuable. Stand up a lab instance, walk through initial setup, create VLANs and self IPs, and then practice the full cycle of saving a configuration archive, installing software to a second boot location, and understanding how you would roll back. Even if the exam questions are conceptual, having done the sequence makes the "what happens next" reasoning easy.

Domain 2: Data Plane Concepts

F5CAB2, "BIG-IP Administration Data Plane Concepts," is where the application delivery fundamentals live. It is concept-focused: it asks whether you understand how BIG-IP handles traffic and why its objects are structured the way they are.

The recurring trap in concept exams is conflating similar objects. A candidate who can articulate the difference between a node and a pool member, or between a virtual server's destination and its pool, will handle most of the scenario wording comfortably. Traffic-flow reasoning, such as tracing a request from client to virtual server to pool member and back, is the single most useful skill to build for this exam and the next.

Domain 3: Data Plane Configuration

F5CAB3, "BIG-IP Administration Data Plane Configuration," turns the concepts of F5CAB2 into configuration decisions. Where F5CAB2 asks "how does this work," F5CAB3 asks "how would you set this up, and what will it do."

Because the blueprint does not target version-specific features, you do not need to chase interface differences between releases. Focus on what each setting does conceptually, and be ready to explain the consequence of a misconfiguration.

Domain 4: Control Plane Administration

F5CAB4, "BIG-IP Administration Control Plane Administration," shifts from application traffic to the management of the system itself. The control plane is how administrators access, secure, back up, and maintain the device, as opposed to how user traffic flows through it.

Candidates from application or network backgrounds sometimes underweight this exam because it feels less exciting than traffic management. That is a mistake given the pass requirement: it is one of five exams, and an administrator who cannot manage access and configuration safely is not production-ready. Practice creating a restricted user, exercising a backup and restore, and checking where logs are being sent.

Domain 5: Support and Troubleshooting

F5CAB5, "BIG-IP Administration Support and Troubleshooting," asks you to diagnose problems. It tends to feel the most applied, because the questions describe a symptom and ask you to identify the likely cause or the right next step.

The best preparation is to break things deliberately in a lab and then diagnose them: disable a pool member, misconfigure a monitor, remove a translation setting, and practice reading what the system reports. This builds the symptom-to-cause intuition the exam measures. Our difficulty guide discusses where candidates most often feel pressure across the five exams.

Permitted Order vs. Recommended Order

F5 allows you to take the five exams in any order. That is the official rule, and it is flexibility worth using. But "permitted" is not the same as "optimal." The sequence below is an editorial recommendation, not an F5 requirement, and it follows how the knowledge builds on itself.

The reasoning: troubleshooting leans on everything before it, so leaving it for last lets it draw on the concepts and configuration skills you have already built. If you already work with BIG-IP daily, compress or reorder freely; the schedule is a starting point, not a rule. Because each exam is a separate sitting at US$50 online or US$65 at a test center, you can also pace payment and attempts across weeks rather than committing everything at once. For a fuller preparation framework, see the F5-CA study guide, and for quick last-minute review, the F5-CA cheat sheet.

Using Legacy Resources Without Assuming Alignment

Many study materials online were written for the older 101 and 201 exam route. That route is not a fresh path for new candidates: Exam 101 retired on April 30, 2025, though qualifying holders of a 101 pass retain a 24-month eligibility window to complete 201. If you are starting today, plan for the five-exam structure.

Legacy resources can still help, particularly for foundational BIG-IP concepts, but do not assume they map cleanly onto F5CAB1 through F5CAB5. Some sites claim direct alignment without an objective-by-objective crosswalk. A safer approach is to take the official blueprint, list each objective under its exam, and check whether a given resource actually covers it. Use an older resource where it genuinely addresses an objective, and fill the gaps with lab practice.

You can pressure-test your readiness with domain-targeted questions on the main practice test site, which is useful for spotting which of the five exams needs more lab time before you schedule it.

Validity, Renewal, and Where the Credential Leads

The credential is valid for two years from the final required passing exam that awards it. For renewal, F5's current policy offers the F5CABR recertification exam or achieving or renewing a higher certification that lists F5-CA as a prerequisite. F5CABR is a separate exam: 50 questions, 60 minutes, a passing score of 245, at US$100 online or US$130 at a test center. No CEU or CPE route is published. Be aware that older transition material mentioned renewal by retaking all five exams, but the latest renewal page lists the F5CABR and higher-credential routes, so confirm current policy when your date approaches.

One unresolved point worth flagging: retake waiting periods are consistent across sources for the first three failures (15, 30, and 45 days), but the rules after a fourth failure differ between the exam catalog and the candidate agreement. Because that conflict is unreconciled, check F5's current pages directly before relying on any single description.

As for career value, the credential signals practical BIG-IP administration skill, which is relevant to network, infrastructure, and application delivery roles. No credential-specific salary survey was retrieved, so we avoid quoting a pay premium. For a grounded look at roles and returns, see the F5-CA jobs overview, the salary guide, and the ROI analysis.

Frequently Asked Questions