- What You Are Actually Studying For
- Eligibility Before Study: The Prerequisite Checklist
- Exam 402 Mechanics: Format, Fee, Scaled Score
- Walking the Five Blueprint Sections
- Scenario Thinking: How 402 Questions Reward Architects
- Resources: What Exists and What Does Not
- Scheduling Your Weeks by Domain
- Retake Waits, Validity and Renewal
- Career Return and the Cloud vs Security Track
- Frequently Asked Questions
- Exam 402 has 70 questions (65 scored, five pilot) in 105 minutes at Pearson VUE, for US$180 per attempt.
- Eligibility requires valid F5-CA BIG-IP, F5-CTS BIG-IP LTM and F5-CTS BIG-IP DNS certifications; one specialist credential is not enough.
- The pass mark is a scaled 245 on a 100-350 range, not 70% correct.
- F5 publishes no section weights, so prepare all five blueprint sections evenly.
What You Are Actually Studying For
This guide covers one credential: F5 Certified Solution Expert, Cloud, shown as F5-CSE, CLD in the F5 learning portal and earned through Cloud Solutions exam 402. It is not the Security Solutions exam (401), not the DNS exam (302), not an F5 Distributed Cloud accreditation and not an AWS certification. If you are still orienting yourself, start with What Is F5-CSE Cloud? and then return here.
The exam targets candidates with direct cloud-infrastructure experience and architecture and integration competence. F5 publishes no mandatory degree, no fixed number of experience or training hours, and no reference requirements. What F5 does enforce is a certification chain, covered next. The scope document is the exam blueprint, identifier 402.42019, linked from the Cloud Solutions 402 support page. The exam is not designed around version-specific TMOS features, so do not spend your preparation memorizing release notes. Spend it understanding how application delivery behaves when it moves into, across and between cloud environments.
Eligibility Before Study: The Prerequisite Checklist
Many candidates lose weeks because they study for 402 before confirming they may sit it. Treat this as a gate. The current 402 support page explicitly requires all three of the following to be valid:
- F5-CA BIG-IP (Certified Administrator)
- F5-CTS BIG-IP LTM (Certified Technology Specialist, Local Traffic Manager)
- F5-CTS BIG-IP DNS (Certified Technology Specialist, DNS)
One technology-specialist credential alone is insufficient. The issuer's Cloud learning path shows the route as the five F5CAB administrator exams (or an eligible legacy administrator route), LTM exams 301a and 301b, DNS exam 302, and then Cloud Solutions 402. Retained legacy entries do not reopen exam 101 to new candidates. Several third-party sites claim a single CTS credential is enough; that conflicts with F5's own page, so rely on F5. The full breakdown lives in F5-CSE Cloud Requirements.
Bring two signed IDs on test day, one of them government-issued with a photograph, matching your candidate account. Registration and the F5 Certified Candidate Agreement apply, and closed-book rules bar books, notes and personal electronics. Calculator provision was not verified, so do not plan around having one.
Exam 402 Mechanics: Format, Fee, Scaled Score
| Item | Published detail for 402 |
|---|---|
| Questions | 70 multiple-choice (65 scored, five pilot/beta) |
| Time | 105 minutes, excluding approved accommodations |
| Passing score | 245 on a 100-350 scaled range |
| Fee | US$180 per attempt, plus local taxes/fees where applicable |
| Delivery | Pearson VUE test centers, English |
| Question style | Some items use exhibits or scenarios |
| Validity | Two years from the qualifying exam |
Three details deserve attention. First, the five pilot items are unmarked, so you cannot tell which ones do not count; answer every item with full effort. Second, the proportion of single-select versus multiple-select questions and whether the exam is adaptive were not verified, so practice both formats without assuming either. Third, the pass mark is a scaled score. 245 out of 350 is not 70%, and any site converting it to a raw percentage is guessing. Our passing score explainer covers how to interpret it, and the cost breakdown shows how prerequisite exams add to the real investment.
Pace yourself arithmetically: 105 minutes across 70 items leaves roughly a minute and a half per question, with exhibit-based scenarios consuming more than their share. Flag long scenarios, bank the quick wins first and return.
Walking the Five Blueprint Sections
The blueprint has five sections, and the headings below reproduce its official examination-section names. F5 publishes no percentage weights and no "highest-weighted" section, so ignore any site that assigns percentages; they are not sourced from the issuer. For a deeper per-section treatment, see F5-CSE Cloud Exam Domains: Complete Guide to All 5 Content Areas.
Domain 1: Foundational Cloud Concepts
The vocabulary and models that every later question assumes.
- Cloud service and deployment models and what each implies for who controls what.
- Business constraints that drive cloud decisions: cost model, compliance, latency, data location.
- How application delivery functions (load balancing, persistence, health monitoring) change meaning in elastic environments.
- Licensing and support considerations for virtual instances.
Domain 2: Cloud Infrastructure Design
Where architecture judgment is tested most visibly.
- Instance sizing and placement against throughput, availability and cost.
- SDN constraints and how overlay or provider networking limits what a virtual appliance can do (for example, restrictions around L2 behavior, addressing and high-availability mechanisms).
- Integration of application delivery services with the cloud provider's network and orchestration layers.
- The RESTful API model, including the north-, east-, south- and west-bound API framing for how components communicate.
Domain 3: Cloud Migration
Moving existing applications without breaking them.
- Identifying migration dependencies: DNS, certificates, persistence, upstream and downstream services.
- Validation steps before cutover and rollback thinking.
- Cloud bursting: when on-premises capacity is extended into a cloud, and what must be true for traffic steering to work.
Domain 4: Cloud Deployment
Standing the design up correctly.
- Deploying application delivery instances into cloud environments and verifying them.
- Configuration and licensing of deployed instances.
- Post-deployment validation of traffic flow, monitoring and availability.
Domain 5: Cloud Orchestration and Automation
Making deployment repeatable.
- Deployment templates and the sequencing of orchestrated steps.
- Using REST APIs to configure and manage services programmatically.
- Understanding which steps must precede others (an instance before its configuration, a dependency before its consumer).
The examples inside each box are illustrative, not exhaustive; use the blueprint's own objective statements as your checklist. Because objective counts per section are not weights, resist the urge to skip any section as "small." Where modern examples appear in this guide, treat them as supplemental illustrations rather than published exam scope.
Scenario Thinking: How 402 Questions Reward Architects
Because the exam uses scenarios and exhibits, success depends on weighing constraints rather than recalling definitions. Public practice sites vary widely here; some samples use conspicuously irrelevant distractors (office furniture, weather) that train you to spot wrong answers by absurdity rather than by reasoning. Real preparation needs plausible distractors. Work through originals like these and justify each elimination in writing.
Scenario A: Migration dependency
A company plans to move a customer-facing application to a cloud provider over a weekend. The application relies on session persistence and an internal authentication service that will remain on-premises. Which planning step is most critical before cutover?
- A. Resize the virtual instance to the largest available size.
- B. Confirm connectivity, latency and name resolution between the cloud-hosted application and the on-premises authentication service, and define a rollback path.
- C. Disable health monitoring to avoid false failovers during migration.
- D. Migrate the authentication service afterwards and test it in production.
Reasoning: B addresses the dependency and validation concerns Domain 3 emphasizes. A treats a design problem as a capacity problem. C removes the safety net. D delays discovery of a known dependency to the riskiest moment.
Scenario B: SDN constraint
An architect wants a pair of virtual application delivery instances in a public cloud to use a failover approach that relies on gratuitous ARP and shared Layer 2 addressing. The provider network does not forward such traffic. What is the best response?
- A. Proceed anyway and rely on the provider to add support.
- B. Redesign failover using a mechanism compatible with the provider's networking, such as API-driven address reassignment or load-balancer fronting.
- C. Place both instances on one host to avoid network traversal.
- D. Replace the application delivery layer with static DNS entries.
Reasoning: B respects the SDN limitation (Domain 2). C defeats availability. D discards the function the design needs. A ignores a known constraint.
Scenario C: Orchestration sequencing
A deployment template creates a virtual instance and then pushes configuration via REST API. Configuration calls intermittently fail. What is the most likely design flaw?
- A. The template does not wait for the instance's management interface to become ready before issuing API calls.
- B. The instance is licensed incorrectly for REST access.
- C. REST APIs cannot configure application delivery services.
- D. The template should send configuration before the instance exists.
Reasoning: A is a classic sequencing fault (Domain 5). C is false, and D is impossible.
When you want volume with explanations, the F5-CSE Cloud practice test site offers scenario-style practice you can pair with these originals. For a calibrated sense of effort, read How Hard Is the F5-CSE Cloud Exam?
Resources: What Exists and What Does Not
F5 states that it does not create or maintain official certification study guides. Anything marketed as an "official" 402 guide is therefore not issuer-produced. Here is how to treat what is available:
- The blueprint (402.42019): your authoritative scope document. Print the five sections and tick off each objective as you can teach it.
- F5-hosted community class page: the community "402 - Cloud Solutions Study Guide" page is explicitly marked not created and unofficial, and its TMOS v12.1 boilerplate does not establish the current exam version. Do not rely on it as a guide.
- DevCentral reading list and notes: a community member's personal preparation notes and reading suggestions. Helpful as a starting bibliography, but it disclaims official status and is not exhaustive.
- Commercial third-party sites: several sell 402 practice material. Their claims of 80 questions, 90 minutes, one-CTS eligibility, remote delivery, section percentages or a 70-75% raw pass mark conflict with F5's published specifications. Use them, if at all, for extra question exposure, and verify every logistics fact against F5.
- Hands-on labs: the single highest-value resource. Deploy virtual instances, call REST endpoints, and break things deliberately.
For structured learning options, see F5-CSE Cloud Training, and keep the one-page cheat sheet for the final review week.
Scheduling Your Weeks by Domain
You already hold LTM and DNS knowledge from the prerequisites, so spend your time where that knowledge stops: cloud-specific networking, migration planning and automation. A six-week arrangement that front-loads concepts and ends on integration:
Foundational Cloud Concepts
- Map each blueprint objective to what you already know from CA, LTM and DNS.
- List the gaps, especially licensing and support terms.
Cloud Infrastructure Design
- Study instance sizing, placement and SDN limits; this is the densest reasoning content.
- Practice the north/east/south/west-bound API model until you can sketch it from memory.
Cloud Migration and Deployment
- Write a migration checklist, then a cloud-bursting scenario of your own.
- Deploy an instance and validate traffic flow end to end.
Orchestration and Automation
- Build a template and a REST workflow; fix ordering failures.
Timed review
- Take full-length timed sets at 105 minutes and review every miss by objective.
Design and orchestration get extra time because they are scenario-heavy; foundations come first because every later question assumes that vocabulary. Adjust the pacing to your own cloud background rather than treating six weeks as fixed.
Retake Waits, Validity and Renewal
Plan for the possibility of a retake, because waiting periods are real. The 402 blueprint and current catalog specify waits of 15, 30 and 45 days after the first three failures, 365 days after the fourth, and 90 days subsequently. The July 2025 F5 Certified Candidate Agreement describes the fourth-failure case differently: up to 90 days or a new exam version, whichever is shorter, with prerequisite exams to be retaken and passed. That conflict is unresolved, so confirm the current rule with F5 before scheduling any attempt beyond your third. Each retake costs another US$180.
The credential is valid for two years from the qualifying exam. Per F5's renewal policy, retaking and passing 402 renews it; no dedicated Cloud recertification exam or CEU/CPE route was verified. Passing or renewing Cloud can also extend qualifying prerequisite credentials, while renewing the administrator credential alone does not renew Cloud. Check scheduling and exam-date guidance and book your Pearson VUE slot only after your prerequisites are confirmed valid.
Key Takeaway
Verify prerequisite validity dates before you book. If a CA, LTM or DNS credential lapses before 402, the eligibility chain breaks, and an otherwise ready candidate has to renew first.
Career Return and the Cloud vs Security Track
Be skeptical of any salary number attached to this credential. No official F5-CSE Cloud pass rate and no credential-specific salary survey was retrieved, and pages that extrapolate from generic cloud roles or F5 employee pay do not establish a Cloud-credential premium. Treat pass-rate discussions and salary analyses as context, not guarantees. A better ROI method uses your own inputs: the full cost of the prerequisite chain plus US$180 per attempt and study time, against your employer's actual requirements and the roles in F5-CSE Cloud jobs postings you are targeting. The worth-it analysis walks through this framework.
If you are weighing tracks, remember the two current F5 solution-expert paths are distinct credentials, not interchangeable ones:
| Aspect | Cloud (402) | Security (401) |
|---|---|---|
| Exam focus | Cloud architecture, migration, deployment, orchestration | Security solutions design and implementation |
| Typical role fit | Cloud and application delivery architects | Security architects and engineers |
| Entry chain | CA BIG-IP, CTS LTM and CTS DNS required | Its own prerequisite chain; check F5's 401 page |
Choose by the work you do or want to do, and confirm each track's prerequisites on F5's pages rather than assuming they match.
Frequently Asked Questions
The exam has 70 multiple-choice questions, of which 65 are scored and five are pilot items, with 105 minutes allowed (excluding approved accommodations). Some questions use exhibits or scenarios.
A scaled score of 245 on a 100-350 range. This is not 70% correct, and F5 does not publish a raw-percentage equivalent, so aim for mastery of all five sections rather than a target percentage.
No. The current F5 support page requires valid F5-CA BIG-IP, F5-CTS BIG-IP LTM and F5-CTS BIG-IP DNS certifications. Third-party claims of single-CTS eligibility conflict with F5's requirement.
No. F5 states it does not create or maintain official certification study guides. Use the published blueprint (402.42019) as your scope document and supplement with hands-on practice.
The credential is valid for two years from the qualifying exam. F5's renewal policy supports retaking and passing 402 to renew it; no separate Cloud recertification exam or CEU/CPE route was verified.
For the core definitions behind this credential, revisit the F5-CSE Cloud certification overview, and when you are ready to test yourself under timed conditions, try the practice questions on the main F5-CSE Cloud exam prep site.