F5-CA logo
Focused certification exam prep
Start practice

F5-CA Study Guide 2026: How to Pass on Your First Attempt

TL;DR
  • F5 Certified BIG-IP Administrator (F5-CA) requires passing five separate exams, F5CAB1 through F5CAB5, in any order.
  • Each exam has 30 multiple-choice questions in 30 minutes, and some questions require selecting two answers.
  • The passing score is 245 on a 100-350 scaled range, not a published percent-correct threshold.
  • One attempt at all five costs US$250 online or US$325 at Pearson VUE test centers.

What You Are Actually Studying For

The F5 Certified BIG-IP Administrator credential, issued by F5 and currently styled F5 Certified Administrator, BIG-IP, is not a single exam. It is a bundle of five separately assessed exams, each with its own name, its own 30-minute clock and its own scaled score. You earn the credential only after passing all five. This structure changes how you should plan, because a weak area cannot be hidden behind a strong one the way it can in a single blended exam.

The official reference document is the F5-CAB.0425 exam blueprint, a seven-page PDF. It lists objectives under each of the five exams and notes that its examples are illustrative rather than exhaustive. It also does not target version-specific BIG-IP features, so you should concentrate on durable concepts such as how traffic flows through a virtual server, how pools and monitors behave, and how the control plane is administered, instead of memorizing release-specific menus.

If you are new to the credential itself, our explainers What Is F5-CA Certification? and What Does F5-CA Stand For? cover the naming, while this guide concentrates on how to pass.

Why the blueprint matters more than any course: F5 states that it does not create or maintain official certification study guides. It points candidates to the blueprint, its preparation resources and practical experience. Treat any third-party "official guide" claim with suspicion, and treat the blueprint as the only authoritative checklist.

Five Exams, One Credential: Format and Fees

Knowing the mechanics up front prevents expensive surprises. The five exams are:

ExamTitleQuestionsTime
F5CAB1BIG-IP Administration Install, Initial Configuration, and Upgrade3030 minutes
F5CAB2BIG-IP Administration Data Plane Concepts3030 minutes
F5CAB3BIG-IP Administration Data Plane Configuration3030 minutes
F5CAB4BIG-IP Administration Control Plane Administration3030 minutes
F5CAB5BIG-IP Administration Support and Troubleshooting3030 minutes

A note on the question count: F5's older overview page still says 25-30 questions, but the individual exam support pages updated in December 2025 state 30 items each. This guide uses the newer, exam-specific figure. Thirty questions in thirty minutes works out to roughly one minute per question, so you cannot afford to deliberate at length. Some questions require two choices, as F5 staff confirmed at launch and again in an April 2025 clarification. Read each stem carefully for wording that signals multiple answers. F5's published material does not describe how partial credit is handled, so assume you need both correct selections.

Fees and delivery

Exams are delivered through Certiverse with online proctoring at US$50 per exam, or at Pearson VUE test centers at US$65 per exam. Attempting all five once therefore costs US$250 online or US$325 at test centers, before retakes and preparation materials. No member or nonmember pricing split is published. For a fuller breakdown, see our F5-CA certification cost guide.

Scoring

The passing score is 245 for each exam on a scaled range of 100 to 350. This is a scaled score, not "70 percent correct," and F5 does not publish a percent-correct equivalent. Our article on the F5-CA passing score explains scaling in more detail, and you should be equally cautious about any advertised pass rate; see F5-CA pass rate: what the data shows for why provider-marketed figures cannot be treated as cohort statistics.

Where the Legacy 101/201 Route Fits

Older study material still circulates that refers to Exam 101 and Exam 201. The legacy 101 exam retired on April 30, 2025, and the five-exam route is the path for new candidates. However, people who passed 101 before retirement retain a 24-month eligibility window to complete 201, so 201 should not be described as universally unavailable. If you hold a qualifying 101 pass, check your own eligibility dates with F5 before choosing a route.

If you are starting fresh, ignore any resource that frames the credential around 101 and 201 question counts, durations or fees. Some marketplace practice tests and aggregator pages mix those legacy specifications with the current five-exam structure. Our F5-CA requirements guide covers eligibility, and F5-CA exam dates covers scheduling.

Domain-by-Domain Study Map

The five domains correspond to the five exams. F5 publishes no percentage weights, and equal question counts do not mean equal difficulty or equal objective counts, so allocate time based on your own gaps and experience. For a deeper breakdown, read F5-CA exam domains: complete guide to all 5 content areas.

Domain 1: BIG-IP Administration Install, Initial Configuration, and Upgrade (F5CAB1)

This exam covers getting a BIG-IP system running and keeping it current. Expect questions on initial setup, licensing, interface and VLAN configuration, self IPs, and the upgrade process.

  • Know how base network objects (VLANs, self IPs, trunks) relate to each other
  • Understand licensing and provisioning concepts at the level a first-day administrator needs
  • Be able to describe upgrade and rollback steps and what to verify afterward

Domain 2: BIG-IP Administration Data Plane Concepts (F5CAB2)

This is the conceptual heart of load balancing: how application traffic is handled. Expect scenario-style questions about traffic flow rather than click-path questions.

  • Trace a client request through a virtual server, to a pool member and back
  • Understand the roles of nodes, pool members, monitors and load balancing methods
  • Know why SNAT and persistence exist and what problems each solves
  • Be comfortable with the difference between full-proxy behavior and simple packet forwarding

Domain 3: BIG-IP Administration Data Plane Configuration (F5CAB3)

Where Domain 2 asks "how does it work," this exam asks "how do you set it up." Candidates who have built virtual servers by hand will find this familiar.

  • Configure virtual servers, pools, monitors and profiles
  • Apply persistence and understand its interaction with load balancing methods
  • Work with TLS-related profiles and understand client-side versus server-side behavior
  • Recognize which configuration object solves which application requirement

Domain 4: BIG-IP Administration Control Plane Administration (F5CAB4)

This exam concerns managing the device itself rather than the application traffic passing through it.

  • User accounts, roles and authentication sources
  • Configuration management, backups and restoring a saved configuration
  • Logging, remote syslog and SNMP-style monitoring concepts
  • Understanding partitions and administrative separation at a conceptual level

Domain 5: BIG-IP Administration Support and Troubleshooting (F5CAB5)

Troubleshooting questions reward a systematic method more than memorized commands. Practice reasoning from symptom to layer to likely cause.

  • Use statistics and logs to determine whether a problem sits on the client side, the BIG-IP or the server side
  • Interpret pool member and virtual server status indicators
  • Know what diagnostic data to collect when working with support
  • Recognize common causes of failed monitors and unreachable virtual servers

Lab Exercises That Match the Objectives

Because the exams are closed book and the blueprint expects practical competence, hands-on time in a BIG-IP lab environment is the single best investment. Build these exercises deliberately instead of poking randomly at the interface:

  1. Build a basic virtual server end to end. Create two pool members, attach a monitor, create the virtual server and confirm traffic reaches the back end. Then deliberately break the monitor and observe how status changes.
  2. Test persistence behavior. Configure persistence, send repeated requests from one client, then change load balancing methods and see how persistence overrides distribution.
  3. Experiment with SNAT. Run a flow with and without SNAT and note how the server sees the source address. This exercise clarifies many Domain 2 traffic-flow questions.
  4. Attach TLS profiles. Configure a client-side profile, then add a server-side one, and compare what each side of the proxy sees.
  5. Practice configuration safety. Save a backup, make a change, then restore. This reinforces Domain 4 material.
  6. Read statistics under load. Generate traffic and learn where to find connection counts and pool member state. This is core Domain 5 skill.
  7. Rehearse an upgrade plan on paper. Write down your pre-checks, backup step, upgrade steps and post-upgrade validation for Domain 1.
Concepts beat menus: Because the blueprint does not target version-specific features, an exercise is only valuable if you can explain why each setting matters. After every lab, write one sentence describing what the system did and which object caused it.

Recommended Study Order vs. Permitted Order

F5 allows the five exams to be taken in any order. That is the official rule. What follows is an editorial recommendation, not an F5 requirement. Concept-first sequencing tends to make configuration and troubleshooting easier because each later exam leans on the mental model from the earlier ones.

Weeks 1-2

F5CAB1 and F5CAB2 foundations

  • Stand up a lab and master base networking objects
  • Trace traffic flow until you can draw it from memory
  • Sit F5CAB1, then F5CAB2, while concepts are fresh
Weeks 3-4

F5CAB3 configuration depth

  • Build virtual servers, profiles, persistence and TLS setups repeatedly
  • Sit F5CAB3 once you can configure without notes
Week 5

F5CAB4 control plane

  • Practice backups, users, logging and configuration management
  • Sit F5CAB4
Week 6

F5CAB5 troubleshooting

  • Create deliberate faults and diagnose them using statistics and logs
  • Sit F5CAB5, then revisit any exam you want to shore up

Troubleshooting goes last because it draws on everything else. If you already administer BIG-IP daily, compress the timeline and spend your time on the domains your job rarely touches, which for many working administrators is Domain 1 (install and upgrade) or Domain 4 (control plane). Keep the study plan modest in size and specific in focus; the F5-CA cheat sheet works well as a final-week review of key facts.

Choosing Resources and Avoiding Pitfalls

Since F5 does not publish an official study guide, candidates assemble preparation from several sources: the blueprint, F5's own preparation resources, a lab environment, and third-party materials. A few cautions apply when evaluating third-party content:

  • Check the exam structure being described. Some pages still advertise legacy 101/201 details, including larger question counts, longer durations and different fees. Those do not describe the current five-exam credential.
  • Be skeptical of pass-rate claims. No official F5-CA candidate pass rate was found, so a marketed percentage cannot be verified.
  • Do not assume topic percentages are official. F5 publishes no domain weights. Percentage allocations on third-party pages are editorial.
  • Verify fees against F5. Some third-party pages understate the Pearson VUE price. The issuer figure is US$65 per exam at test centers.
  • Prefer practice sets mapped to individual exams. Material that blends all five exams into one undifferentiated pool makes it hard to judge readiness for a specific sitting.

Our own practice tests are organized so you can drill each of the five exam areas separately. Using question practice to find weak objectives, then returning to the lab to fix them, is more effective than rereading notes. If you want guided instruction, see our overview of F5-CA training options, but remember that a course alone is not described by F5 as sufficient preparation.

Key Takeaway

Use the blueprint as your checklist, the lab as your proof of understanding, and practice questions as your gap detector. If you cannot explain an objective aloud and demonstrate it on a BIG-IP, you are not ready to sit that exam.

Exam-Day Mechanics and Retakes

All exams are in English and closed book. Books, notes and personal electronic devices are prohibited under the F5 Certified Candidate Agreement. At a test center, you may take notes only on the writing materials supplied. Whether adaptive delivery or a built-in calculator applies was not verified, so do not plan around either.

Pacing a 30-question, 30-minute sitting

With about a minute per question, a workable approach is to answer straightforward items quickly, flag uncertain ones, and return if time remains. On multi-select items, confirm the number of required choices before committing. Do not spend several minutes on one troubleshooting scenario while easier items wait.

If you do not pass

Retake rules are the area where F5's own sources conflict, so verify the current policy at the time you register. Catalog pages list waits of 15, 30 and 45 days after the first three failures. For later failures the issuer sources disagree: the catalog describes one year after a fourth failure and 90 days after fifth and subsequent failures, while the July 2025 candidate agreement describes a shorter wait after the fourth failure and says prerequisite exams must be retaken. Because this conflict is unresolved, check F5's current pages before planning around a fourth attempt. Practically, the first three waits are consistent, so a good plan is to treat any failed exam as a signal to return to the lab, not just to retest quickly.

After You Pass: Validity and Renewal

The credential is valid for two years from the final required passing exam. Renewal options per F5's current renewal policy include the separate F5CABR recertification exam or achieving or renewing a higher certification that lists F5-CA as a prerequisite. F5CABR has 50 questions, a 60-minute limit and a passing score of 245, and costs US$100 online or US$130 at a test center. No continuing-education route is published. Passing an intermediate exam alone does not establish renewal of the higher credential, so confirm what your chosen path requires.

On the career side, the credential is aimed at people who operate BIG-IP in production, such as network and application delivery engineers and administrators. We avoid quoting a salary premium because no credential-specific salary survey exists; see F5-CA salary guide, F5-CA jobs and is the F5-CA certification worth it for a grounded view of return on investment, and how hard is the F5-CA exam for a difficulty assessment.

Frequently Asked Questions

Do I have to pass all five F5-CA exams?

Yes. The credential is earned only after passing F5CAB1 through F5CAB5. They may be taken in any order, and each is scored separately against a passing score of 245.

How many questions and how much time does each exam have?

Each current exam has 30 multiple-choice questions and a 30-minute limit. Some questions require two selections. An older overview page still says 25-30 questions, but the exam-specific pages state 30.

How much does it cost to earn the credential?

One attempt at all five exams costs US$250 online through Certiverse (US$50 each) or US$325 at Pearson VUE test centers (US$65 each), excluding retakes and preparation materials.

Is there an official F5 study guide?

No. F5 states it does not create or maintain official study guides and directs candidates to the exam blueprint, its preparation resources and hands-on BIG-IP experience.

Can I still use the old 101 and 201 exams?

Exam 101 retired April 30, 2025. Candidates who passed it before retirement keep a 24-month window to complete 201, but new candidates follow the five-exam route.

Ready to pass your F5-CA exam?

Put this into practice with free F5-CA questions across every exam domain.