F5-CSE Cloud logo
Focused certification exam prep
Start practice

F5-CSE Cloud Certification

TL;DR
  • F5-CSE Cloud is awarded through Cloud Solutions exam 402: 70 questions, 105 minutes, scaled passing score of 245 on a 100-350 range.
  • Eligibility requires three valid certifications together: F5-CA BIG-IP, F5-CTS BIG-IP LTM, and F5-CTS BIG-IP DNS.
  • The blueprint lists five sections and publishes no percentage weights, so never study by guessed weighting.
  • The exam fee is US$180 per attempt at Pearson VUE test centers; two IDs are required.

What This Credential Actually Is

The F5 Certified Solution Expert, Cloud credential (F5-CSE, Cloud, shown as F5-CSE, CLD in the learning portal) sits at the expert tier of the F5 certification program. It is earned by passing a single exam: Cloud Solutions 402. If you are new to the terminology, our explainer on what F5-CSE Cloud certification is covers the naming in more detail.

The identity of this credential matters because searches around it attract confusion. This credential is not the Security Solutions exam 401, not the DNS exam 302, not an F5 Distributed Cloud accreditation, and not an AWS credential. Third-party pages sometimes blur those boundaries. The authoritative scope is the official blueprint, 402 - Cloud Solutions, identifier 402.42019, a five-page document linked from F5's Cloud Solutions support page (updated December 1, 2025).

Read the blueprint as a boundary, not a hint: The blueprint's examples are illustrative, not exhaustive, and the exam is not designed around version-specific TMOS features. Think in architecture and design principles rather than memorizing a single software release. The PDF carries a 2021 copyright footer, but that footer does not tell you the blueprint is a new edition. Treat the linked December 2025 support page as the current authority.

The expected candidate is someone with direct cloud-infrastructure experience and architecture and integration competence. No degree, fixed training hours, or references are required by F5. What is required is the certification chain described next.

The Eligibility Chain: Three Credentials Before 402

This is where many candidates, and many third-party study sites, go wrong. The current 402 support page requires valid F5-CA BIG-IP AND F5-CTS BIG-IP LTM AND F5-CTS BIG-IP DNS certifications. One technology-specialist credential alone is not enough. Some competitor pages claim any single CTS credential suffices; that does not match F5's published requirement. For a full walkthrough, see our F5-CSE Cloud requirements guide.

The issuer's Cloud learning path lays out the sequence this way:

  1. The five F5CAB administrator exams, or an eligible legacy administrator route (the retained legacy entries do not reopen exam 101 to new candidates).
  2. The LTM exams 301a and 301b.
  3. The DNS exam 302.
  4. Cloud Solutions 402.

Prerequisite Checklist

Before you book 402, confirm each item:

  • F5-CA BIG-IP is valid, not lapsed.
  • F5-CTS BIG-IP LTM is valid.
  • F5-CTS BIG-IP DNS is valid.
  • Your candidate account and agreement are completed.
  • You have two signed IDs, one government-issued with a photograph, matching your account name.

Distinguish eligibility from recommended experience. The certification chain is mandatory. The cloud-infrastructure hands-on experience is the recommended profile, not a gate that F5 audits. Plan for the prerequisite exams as part of the total cost and calendar, which our certification cost breakdown explores further.

Exam Mechanics: Format, Fee, Delivery, Scoring

ItemPublished Detail (402)
Questions70 multiple-choice, including 65 scored and five pilot/beta items
Time105 minutes, excluding approved accommodations
Passing score245 on a 100-350 scaled range
FeeUS$180 per attempt; local taxes and fees may apply
DeliveryPearson VUE test centers, English
Rate structureNo member/nonmember split
Question styleSome items use exhibits or scenarios

Several of these figures conflict with what third-party sites claim. Some state 80 questions or 90 minutes; others place delivery with Certiverse or describe online proctoring. The current provider list places 402 under Pearson VUE, not Certiverse, and the 70-question, 105-minute figures come from page 4 of the current blueprint. Our guides on scheduling and exam dates cover booking logistics.

Reading the Scaled Score Correctly

A score of 245 on a 100-350 scale is not 70% correct, and it is not any other fixed percentage of questions. Scaled scoring exists to keep results comparable across exam forms. Some sites convert 245/350 to roughly 70%, but that is arithmetic on the scale, not a statement about how many questions you must answer correctly. Five of the 70 items are unscored pilot questions you cannot identify, so treat every question as if it counts. Details are in our passing score explainer.

What was not verified: The proportion of single-select versus multiple-select items, whether the exam is adaptive, and whether a calculator is provided were not confirmed. Closed-book rules follow the F5 Certified Candidate Agreement: no books, notes, or personal electronics. Do not plan around unverified assumptions; check the candidate agreement and your scheduling confirmation.

The Five Blueprint Sections, Explained

The blueprint publishes five examination sections. It publishes no percentage weights and names no highest-weighted section, so counting objectives per section to infer weighting would be guesswork. Any site quoting official section percentages for 402 is not drawing from the blueprint. For a deeper section-by-section treatment, read the complete guide to all five content areas.

Domain 1: Foundational Cloud Concepts

The vocabulary and models that every later design decision rests on.

  • Service and deployment models, and how business constraints shape which are viable.
  • Licensing and support considerations when workloads move off traditional infrastructure.
  • How application delivery functions you already know from LTM and DNS translate to cloud environments.

Domain 2: Cloud Infrastructure Design

Turning requirements into an architecture that actually fits the environment.

  • Instance sizing and placement decisions, and the trade-offs among them.
  • Software-defined networking (SDN) constraints and integration points.
  • Capacity patterns such as cloud bursting and when they are appropriate.

Domain 3: Cloud Migration

Moving existing applications without breaking dependencies.

  • Identifying migration dependencies before the move, not after.
  • Validation: how to prove the migrated service behaves as the original did.
  • Sequencing a migration around business constraints and risk.

Domain 4: Cloud Deployment

Standing up and integrating the solution in a cloud environment.

  • Deployment templates and how they standardize repeatable builds.
  • Integrating the delivery layer with the cloud provider's networking model.
  • Verifying a deployment against the design intent.

Domain 5: Cloud Orchestration and Automation

Automating the lifecycle through programmable interfaces.

  • RESTful APIs and the N/E/S/W-bound API model for connecting orchestration layers.
  • Orchestration sequencing: what must exist before what.
  • How templates and automation reduce configuration drift.
Honest scope note: Modern products and newer cloud services may make useful practice examples, but they are not automatically in scope. Anchor on the five published headings and their objectives, and treat anything beyond them as supplemental rather than as published exam content.

Scenario Thinking: How 402 Questions Reward Architecture Judgment

Because the exam includes exhibit and scenario items, the skill being measured is judgment under constraints, not recall of a single command. Weak practice material tends to fail here: some public sample sets use conspicuously irrelevant distractors such as office furniture or weather, which teaches nothing about eliminating plausible wrong answers. Real preparation means working scenarios where every option sounds reasonable and one fits the constraints best.

Scenario A: Migration Dependencies

A company plans to move a customer-facing application to a public cloud over a weekend. The application depends on an internal authentication service and a licensing server that will stay on-premises. The tempting answer is to migrate the front end and cut over immediately. The better reasoning identifies the on-premises dependencies first, confirms connectivity and latency between environments, defines a validation step that exercises those dependencies, and only then schedules cutover. This maps to Domain 3: dependency identification and validation come before the move, not after it.

Scenario B: Sizing, Placement, and Licensing

A team must place a delivery instance for a new region. Options include a smaller instance with a tight licensing allowance, a larger instance that exceeds the license, or placement in a location that adds latency to the application tier. Strong answers weigh throughput needs, license limits, and proximity to the workload together. Choosing purely on price or purely on size ignores one of the stated constraints. This is Domain 1 and Domain 2 reasoning combined.

Scenario C: Burst Capacity

An application has predictable peaks that overwhelm its data center capacity several times a year. A cloud-bursting design can extend capacity temporarily, but only if the SDN connectivity, data locality, and session handling allow traffic to move between environments. If the application requires data that cannot leave the data center, bursting the compute alone may not solve the problem. The right answer is the one that respects the data and networking constraint, not simply the one that adds capacity.

Scenario D: Orchestration Order

A deployment template provisions networking, instances, and application configuration. The automation fails intermittently because configuration is pushed before the instance's interfaces are reachable over the management API. The fix is not a longer timeout by itself but correct sequencing: confirm each dependency exists and responds before the next step runs. This sits squarely in Domain 5. Understanding the N/E/S/W-bound API model helps you reason about which interface each integration actually uses.

Key Takeaway

When you practice, force yourself to name the constraint that eliminates each wrong answer. If you cannot say why an option fails, you have not yet learned the scenario. Our practice test platform is built around this kind of explanation-first review.

Sequencing Your Preparation Around the Blueprint

F5 states that it does not create or maintain official certification study guides. The F5-hosted community page for 402 explicitly says its content is not developed and is unofficial, and the F5 DevCentral reading list disclaims official-guide status. That means your preparation is assembled, not handed to you. One sensible way to assemble it is to build outward from the foundations, with a deliberate revision pass at the end. Our broader study guide expands on resources.

Weeks 1-2

Foundational Cloud Concepts, then Infrastructure Design

  • Establish vocabulary and models first; every later scenario depends on them.
  • Practice sizing, placement, and SDN constraint reasoning with written justifications.
Weeks 3-4

Migration and Deployment

  • Build dependency maps for sample applications and design validation steps.
  • Work through template-driven deployment and integration scenarios.
Week 5

Orchestration and Automation

  • Study RESTful API usage and the N/E/S/W-bound model.
  • Practice ordering orchestration steps and diagnosing sequencing faults.
Week 6

Cross-Domain Review

  • Timed runs of 70 questions in 105 minutes to rehearse pacing.
  • Re-study every scenario you missed by identifying the deciding constraint.

The order reflects dependency, not weighting: because F5 publishes no section weights, the sequence is a learning order rather than a priority ranking. Keep a one-page reference of must-know facts, such as our cheat sheet, for the final days.

Cloud Versus Security: Two Different Expert Tracks

Candidates sometimes ask whether to pursue the Cloud credential or the Security track. They are separate issuer tracks aimed at different roles, and one cannot substitute for the other.

AspectCloud (Exam 402)Security (Exam 401)
Awarded throughCloud Solutions 402Security Solutions 401
OrientationArchitecture, migration, deployment, and orchestration in cloud environmentsSecurity-focused solution design
Typical role fitCloud architects and integration engineersSecurity architects and engineers
PrerequisitesValid F5-CA, F5-CTS LTM, and F5-CTS DNSConfirm current requirements on the issuer's Security Solutions page

Choose by the work you do or want to do. If your days involve migrating applications, designing placement, and automating deployments, Cloud aligns with that. If your focus is protecting applications, the Security track is the closer match. Verify the Security track's current prerequisites directly with F5 rather than assuming they mirror Cloud's.

Validity, Renewal, and Retake Rules

The credential is valid for two years from the qualifying exam, per F5's validity policy. The renewal policy supports retaking and passing 402 to renew this credential. No dedicated Cloud recertification exam or CEU/CPE route was verified, so do not plan around one. Achieving or renewing Cloud can extend qualifying prerequisite credentials under that policy, but the F5CABR administrator renewal does not renew Cloud itself.

An unresolved conflict on retakes: The 402 blueprint and current catalog specify waits of 15, 30, and 45 days after the first three failures, 365 days after the fourth, and 90 days for subsequent attempts. The July 2025 candidate agreement instead describes up to 90 days or a new exam version, whichever is shorter, after a fourth failure, with prerequisite exams to be retaken and passed. That fourth-failure discrepancy is unresolved, so confirm the current rule with F5 if you ever approach it. The practical lesson is to prepare thoroughly for each attempt rather than treating the exam as a repeatable experiment.

Each attempt costs US$180 plus any local taxes or fees, so retake waiting periods and fees are strong reasons to attempt the exam when you are genuinely ready. Our difficulty guide can help you judge readiness.

Career Value: What the Evidence Does and Does Not Show

No official pass rate for this credential and no credential-specific salary survey were retrieved. Pages that quote a pass rate (for example, a 99% figure) cite no issuer evidence, and salary pages that extrapolate from generic cloud roles or report employment at F5 do not establish a salary premium for this certification or a causal earnings return. Our pass rate and salary articles discuss how to read such claims critically.

A more reliable way to assess value is to build your own return-on-investment inputs:

  • Total cost: include the prerequisite exams and preparation, not just the US$180 for 402.
  • Role requirements: read real job postings in your target market and see whether they ask for F5 expert-level credentials.
  • Your starting point: if you already hold the prerequisite certifications, your marginal cost is much lower than for someone starting from the administrator exams.
  • Renewal burden: the two-year validity means you should budget for a future retake.

For a framework to work through these inputs, see our ROI analysis and the overview of roles that reference this credential. When you are ready to test your readiness, you can take a practice test built around the five blueprint sections.

Frequently Asked Questions

How many questions are on the F5 402 exam, and how long do I get?

The exam has 70 computer-based multiple-choice questions, including 65 scored items and five pilot items, with 105 minutes allowed (excluding approved accommodations). Some questions use exhibits or scenarios.

What is the passing score for Cloud Solutions 402?

The passing score is 245 on a scaled range of 100 to 350. It is a scaled score, not a percent-correct figure, so it should not be converted into a number of questions you must answer correctly.

Which certifications must I hold before taking 402?

You need valid F5-CA BIG-IP, F5-CTS BIG-IP LTM, and F5-CTS BIG-IP DNS certifications. All three are required together; holding only one technology-specialist credential is not sufficient.

How much does the exam cost and where is it delivered?

The fee is US$180 per attempt, plus any local taxes or fees. The exam is delivered in English at Pearson VUE test centers, and there is no separate member or nonmember rate.

How do I renew the credential?

The credential is valid for two years, and F5's renewal policy supports retaking and passing 402 to renew it. No separate Cloud recertification exam or continuing-education route was verified, so confirm current details on F5's renewal page before you plan.

Ready to pass your F5-CSE Cloud exam?

Put this into practice with free F5-CSE Cloud questions across every exam domain.