You can see it againUnder pressure people bring back shapes and positions long after the wording has gone.
Picture superiority · Shepard 1967, Standing 1973
F5F5 Certified Technology Specialist, BIG-IP DNS
The F5 Certified Technology Specialist, BIG-IP DNS certification validates your ability to deploy, configure, and manage F5 BIG-IP DNS solutions in application delivery environments. It is designed for network professionals who work with DNS and traffic management. Earning it demonstrates your expertise in ensuring application availability and performance through intelligent DNS-based load balancing.
Exam formatMultiple choice
DeliveryPearson VUE
Free questions659
Content last reviewed 30 July 2026 · Up to date
The certification
What 302 proves, and what it asks of you
What this certification covers, who it is written for, and what the exam itself looks like on the day.
3domains
40objectives
189concepts
What it is
What this certification is
What it validates, who it is written for, and the experience it assumes.
About this certification
The F5 Certified Technology Specialist, BIG-IP DNS certification validates your expertise in deploying, configuring, and managing F5 BIG-IP DNS (formerly GTM) solutions. This certification focuses on the skills needed to implement intelligent DNS-based traffic management, ensuring that applications remain available and performant across global and local networks.
Earning this certification demonstrates your ability to manage DNS resolution, load balancing, and health monitoring within the BIG-IP platform. It is a key credential for network engineers and administrators who are responsible for optimizing application delivery and maintaining high availability in complex environments.
Who it’s for
This certification is for network engineers, administrators, and IT professionals who are responsible for deploying and managing F5 BIG-IP DNS solutions. It is ideal for those who work with DNS, traffic management, and application delivery in enterprise environments. Candidates should have a solid understanding of DNS concepts, networking fundamentals, and experience with F5 BIG-IP systems. The certification is designed for professionals who want to validate their skills in optimizing application availability and performance.
Recommended experience
F5 recommends that candidates have a strong understanding of DNS, networking, and experience with F5 BIG-IP systems before attempting this exam. Knowledge of DNS concepts and protocols; Experience with F5 BIG-IP LTM and DNS configuration; Understanding of network infrastructure and application delivery; Familiarity with F5 BIG-IP system administration
The syllabus
What you’ll learn
Every domain and objective F5 measures, with the weight they carry on the exam.
The official F5 exam outline · checked 30 July 2026 · See the source
Section 1: Concepts
- Objective 1.01 Identify resource record types and their purpose including DNSSEC record types
- Objective 1.02 Identify the different zone types and their purpose
- Objective 1.03 Explain the purpose of tools and when to use them
- Objective 1.04 Explain the dataflow of the DNS query process [iterative, recursive, lame delegation, host file, and resolvers]
- Objective 1.05 Distinguish IPv4 versus IPv6 query including differentiating IPv4/6 transport versus IPv4/6 query type and extrapolating when different query types will be used on different transports
- Objective 1.06 Given a DNS hierarchical diagram determine what source IP the GTM will receive the query from
- Objective 1.07 Identify DNS security concepts and their purpose [DDOS, DNSSEC, AnyCast, DNSFirewall, site validation, iRules, and impacts of floating self-IP versus non-floating self-IP listener]
- Objective 1.08 Describe data center, server/virtual server, and object monitoring including explanation of resulting object statuses [prober pools, BIG-IP and generic server objects, monitors, etc.]
- Objective 1.09 Define the GTM load balancing methods and when to use them [dynamic, static]
- Objective 1.10 Identify applicable iRules events including application to WideIP versus Listener
- Objective 1.11 Identify the purpose of GTM tools and when to use them [checkcert, iqdump, etc.]
- Objective 1.12 Explain how zone transfers work [multi master, master/slave, DNSExpress, incremental/full, updates (notify/expire)]
- Objective 1.13 Given a scenario determine the impact of a custom DNS profile for various types of queries, determine what response will be given and where it will come from
- Objective 1.14 Given a scenario with a specific query source IP address and various pool and Wide IP loading balancing methods and topology rules/regions determine the response that will be given
- Objective 1.15 Explain sync group/iQuery purpose, configuration and basic requirements
- Objective 1.16 Explain the networking requirements of placing devices within a GTM data center object
Section 2: Deployment
- Objective 2.01 Explain when to configure translation addresses for local data center connectivity
- Objective 2.02 Explain how to configure GTM sync groups and iQuery
- Objective 2.03 Given a set of requirements select the appropriate load balancing methods [ex. wide IP level, pool level, different types and combinations]
- Objective 2.04 Given a scenario select the appropriate deployment type: screening mode, DNS delegation, caching resolver, and DNS 6 to 4
- Objective 2.05 Explain how to configure GTM to return non-wide IP supported records [ex. MX, SRV, TXT records, etc.]
- Objective 2.06 Given a scenario of specific virtual server status, pool and Wide IP load balancing settings determine the answer returned [Single pool versus multiple pools, effect of secondary and fall-back mechanisms in the first pool, effect of topology and topology records at the Wide IP level versus pool level, and iRule effects]
- Objective 2.07 Given a set of topology requirements configure a deployment using user defined topology prefixes
- Objective 2.08 Given a scenario configure a deployment using auto-discovery [behavior of delete versus no-delete with auto-discovery, compatibility with translation, and route domains]
- Objective 2.09 Explain the necessary steps and tools to add a new LTM to a sync group
- Objective 2.10 Explain the necessary steps and tools to add a new GTM to an existing sync group
- Objective 2.11 Explain how to troubleshoot and verify sync group mesh
- Objective 2.12 Explain the use of device certificates in iQuery [SSL components, expiration, 3rd party certs]
- Objective 2.13 Explain how to verify that DNSSEC is working
- Objective 2.14 Given a scenario explain how to validate system health for proper operation
Section 3: Operations and Troubleshooting
- Objective 3.01 Given a scenario determine the impact of software updates in a group on monitoring and configuration state
- Objective 3.02 Given a scenario determine what is the effect of changing the features enabled in a DNS profile
- Objective 3.03 Explain how to renew device certificates and update them in the sync group
- Objective 3.04 Explain the impact of restoring a UCS on a GTM
- Objective 3.05 Explain the importance of running compatible versions of big3d on the LTM and GTM
- Objective 3.06 Explain how to properly add/remove device from iQuery mesh
- Objective 3.07 Explain the effect of adding a resource record without using ZoneRunner
- Objective 3.08 Explain the effects and implications of securing/hardening with respect to normal operation, iQuery and resolution
- Objective 3.09 Identify GTM specific command line tools and TMSH GTM specific commands
- Objective 3.10 Given a scenario determine what information needs to be provided when making a support call
On the day
The exam itself
Everything F5 publishes about sitting it, and nothing we inferred.
Prerequisites
No mandatory prerequisites — this certification has no required predecessor exam or credential.
Exam code302
CertificationF5 Certified Technology Specialist, BIG-IP DNS
Exam formatMultiple choice
DeliveryPearson VUE
LanguagesEnglish
After you pass
Where this credential goes next
The path F5 lays out, how the credential is kept, and where to book.
Step-by-step path to F5 Certified Technology Specialist, BIG-IP DNS
Credential earnedF5 Certified Technology Specialist, BIG-IP DNS Certification Lifecycle status
This certification is currently active and available. F5 maintains this certification to validate current skills and industry relevance.
Exam status: ActiveMaintained by F5
Exam registration
Register for the exam through Pearson VUE, F5’s authorized testing partner.
Schedule your examVisit the official F5 certification page for exam policies and requirements.
View the official pageYour coach
And when you are serious, your coach Pip takes over
Your coach in the app reads what you have answered with the book closed and tells you one thing to do tonight. It will not count an answer you gave with the page open, and it will tell you when you are not ready.
See how the coach worksBefore you book
Questions people ask
How does the F5-CTS BIG-IP DNS certification relate to other F5 certifications?
F5's certification program is progressive, with higher-level certifications building on the skills demonstrated in previous ones. The F5-CTS BIG-IP DNS is a Technology Specialist certification that can be pursued after earning an F5-CA (Administrator) certification, though it is not a mandatory prerequisite.
Is there a hands-on or lab component in the 302 exam?
F5 exams are designed to validate real-world skills, but the 302 exam is primarily multiple-choice. F5 does not publish details of a lab component for this exam.
What is the retake policy for the 302 exam?
F5's retake policy typically requires a waiting period between attempts, but specific details are not published on the official certification page. Check the F5 Certification Policies for the most current information.
What job roles does the F5-CTS BIG-IP DNS certification map to?
This certification is relevant for network engineers, DNS administrators, and IT professionals responsible for deploying and managing F5 BIG-IP DNS solutions in application delivery environments.
Can I recertify by passing a higher-level F5 exam?
F5's progressive certification model suggests that earning a higher-level certification, such as F5-CSE, may renew or supersede lower-level certifications, but specific renewal policies are not published on the official page.
Information freshness · Content last reviewed on 2026-07-30 Up to date
Practice free questions 659 questions, free, no account needed.
The curriculum
The whole exam, mapped and written
Every domain, every objective, and every concept F5 measures — each one written out.
3domains
40objectives
189concepts
146free pages
The domains, and what sits inside them
Every objective below is a page you can open and practise now, without an account.
The official F5 exam outline · checked 30 July 2026 · See the source
1Section 1: Concepts304 questions
Objective 1.01 Identify resource record types and their purpose including DNSSEC record types5 concepts · 5 pagesOpen →Objective 1.02 Identify the different zone types and their purpose6 concepts · 4 pagesOpen →Objective 1.03 Explain the purpose of tools and when to use them4 concepts · 2 pagesOpen →Objective 1.04 Explain the dataflow of the DNS query process [iterative, recursive, lame delegation, host file, and resolvers]3 concepts · 3 pagesOpen →Objective 1.05 Distinguish IPv4 versus IPv6 query including differentiating IPv4/6 transport versus IPv4/6 query type and extrapolating when different query types will be used on different transports4 concepts · 3 pagesOpen →Objective 1.06 Given a DNS hierarchical diagram determine what source IP the GTM will receive the query from6 concepts · 4 pagesOpen →Objective 1.07 Identify DNS security concepts and their purpose [DDOS, DNSSEC, AnyCast, DNSFirewall, site validation, iRules, and impacts of floating self-IP versus non-floating self-IP listener]7 concepts · 5 pagesOpen →Objective 1.08 Describe data center, server/virtual server, and object monitoring including explanation of resulting object statuses [prober pools, BIG-IP and generic server objects, monitors, etc.]7 concepts · 5 pagesOpen →Objective 1.09 Define the GTM load balancing methods and when to use them [dynamic, static]3 concepts · 4 pagesOpen →Objective 1.10 Identify applicable iRules events including application to WideIP versus Listener4 concepts · 3 pagesOpen →Objective 1.11 Identify the purpose of GTM tools and when to use them [checkcert, iqdump, etc.]5 concepts · 4 pagesOpen →Objective 1.12 Explain how zone transfers work [multi master, master/slave, DNSExpress, incremental/full, updates (notify/expire)]8 concepts · 7 pagesOpen →Objective 1.13 Given a scenario determine the impact of a custom DNS profile for various types of queries, determine what response will be given and where it will come from8 concepts · 6 pagesOpen →Objective 1.14 Given a scenario with a specific query source IP address and various pool and Wide IP loading balancing methods and topology rules/regions determine the response that will be given6 concepts · 5 pagesOpen →Objective 1.15 Explain sync group/iQuery purpose, configuration and basic requirements4 concepts · 4 pagesOpen →Objective 1.16 Explain the networking requirements of placing devices within a GTM data center object2 concepts · 2 pagesOpen →
2Section 2: Deployment198 questions
Objective 2.01 Explain when to configure translation addresses for local data center connectivity3 concepts · 3 pagesOpen →Objective 2.02 Explain how to configure GTM sync groups and iQuery5 concepts · 5 pagesOpen →Objective 2.03 Given a set of requirements select the appropriate load balancing methods [ex. wide IP level, pool level, different types and combinations]5 concepts · 2 pagesOpen →Objective 2.04 Given a scenario select the appropriate deployment type: screening mode, DNS delegation, caching resolver, and DNS 6 to 45 concepts · 3 pagesOpen →Objective 2.05 Explain how to configure GTM to return non-wide IP supported records [ex. MX, SRV, TXT records, etc.]3 concepts · 2 pagesOpen →Objective 2.06 Given a scenario of specific virtual server status, pool and Wide IP load balancing settings determine the answer returned [Single pool versus multiple pools, effect of secondary and fall-back mechanisms in the first pool, effect of topology and topology records at the Wide IP level versus pool level, and iRule effects]4 concepts · 4 pagesOpen →Objective 2.07 Given a set of topology requirements configure a deployment using user defined topology prefixes6 concepts · 3 pagesOpen →Objective 2.08 Given a scenario configure a deployment using auto-discovery [behavior of delete versus no-delete with auto-discovery, compatibility with translation, and route domains]5 concepts · 4 pagesOpen →Objective 2.09 Explain the necessary steps and tools to add a new LTM to a sync group3 concepts · 2 pagesOpen →Objective 2.10 Explain the necessary steps and tools to add a new GTM to an existing sync group3 concepts · 2 pagesOpen →Objective 2.11 Explain how to troubleshoot and verify sync group mesh4 concepts · 2 pagesOpen →Objective 2.12 Explain the use of device certificates in iQuery [SSL components, expiration, 3rd party certs]5 concepts · 4 pagesOpen →Objective 2.13 Explain how to verify that DNSSEC is working3 concepts · 4 pagesOpen →Objective 2.14 Given a scenario explain how to validate system health for proper operation4 concepts · 4 pagesOpen →
3Section 3: Operations and Troubleshooting157 questions
Objective 3.01 Given a scenario determine the impact of software updates in a group on monitoring and configuration state4 concepts · 4 pagesOpen →Objective 3.02 Given a scenario determine what is the effect of changing the features enabled in a DNS profile4 concepts · 3 pagesOpen →Objective 3.03 Explain how to renew device certificates and update them in the sync group4 concepts · 3 pagesOpen →Objective 3.04 Explain the impact of restoring a UCS on a GTM4 concepts · 3 pagesOpen →Objective 3.05 Explain the importance of running compatible versions of big3d on the LTM and GTM4 concepts · 3 pagesOpen →Objective 3.06 Explain how to properly add/remove device from iQuery mesh8 concepts · 4 pagesOpen →Objective 3.07 Explain the effect of adding a resource record without using ZoneRunner5 concepts · 3 pagesOpen →Objective 3.08 Explain the effects and implications of securing/hardening with respect to normal operation, iQuery and resolution7 concepts · 5 pagesOpen →Objective 3.09 Identify GTM specific command line tools and TMSH GTM specific commands3 concepts · 3 pagesOpen →Objective 3.10 Given a scenario determine what information needs to be provided when making a support call6 concepts · 5 pagesOpen →
Not a table of contents
Every line on this map already opens
In front of every objective the practice pages are already there, free and without an account. This is one objective, opened.
Objective 1.01 Identify resource record types and their purpose including DNSSEC record types5 pagesOpen →
Free in front of it
22 questions on this objective, five to a page. Every range above is a real page, open now, with no account.
Reading the map is not the same as knowing the ground
The curriculum tells you what is on the exam. Proving you know it is a different job — and it is the one the closed-book run does.
Free questions
659 questions. No account, no card.
The whole bank is open. 5 questions to a page, every answer explained, and a discussion thread on each one.
659questions
146pages
40objectives
Freealways
Start anywhereObjective 1.01 Identify resource record types and their purpose including DNSSEC record types 22 questions · 5 pages
Browse by domain
Every objective, and every page range, is a link — so you can pick up exactly where you left off.
1Section 1: Concepts304 questions
2Section 2: Deployment198 questions
3Section 3: Operations and Troubleshooting157 questions
What a practice page gives you
1Five to a page
Short enough to finish, long enough to matter.
2Every answer explained
Not only which one is right — why the others are wrong.
3A discussion on each
Ask, answer, and vote. Every question has its own thread.
A question, and the idea behind it
Every question comes from a concept
These are not trivia. Each one is written against a concept in the book, so when you get one wrong there is somewhere to go and find out why.
The visual book
See it once. Carry it into the exam.
The pages shown here come from our AI-900 book — an example of how each concept is written in plain language and, where the idea needs one, drawn as a full page you can take in at a glance.
189concepts
659free questions
Why a picture, and not another paragraph
Three reasons, and each one is a real finding rather than a slogan.
You can see it againThe whole idea at onceWhere it starts, what happens in the middle, what comes out, and the mistake to avoid.
Multimedia principle · MayerThe look-alikes sit togetherThe pairs the exam tests are drawn side by side, so the difference is seen, not told.
Dual coding · PaivioWhat one page is made of
You are never asked to read a poster here — only to see how one is built. After that, every other page is legible at a glance.
1A numbered strip on top
The idea as a sequence, followed with a finger before a word is read.
2Panels for the parts
What it is, how the machine learns it, when it is the right tool.
3The trap, framed
The distinction the exam tests, given its own box instead of buried in prose.
4One line at the bottom
The sentence to carry into the exam room.
Open book, on purpose
Answer it with the picture beside you
This is the part that teaches. The illustration and the written explanation stay where they are while you work, so a scenario stops being a memory test and becomes something you can simply look at.
It teaches · it does not count
A smartphone uses AI to unlock when the owner looks at the camera. Which AI capability is being used?
AImage classification
BFacial recognition
COptical character recognition
DObject detection
Look at the five steps. Detect finds a face, align straightens it, encode turns it into numbers, search compares it with a stored face, and decide answers one question: is this the same person? Classification would only say “a face”. Detection would only draw a box. Neither decides whose.
Then the page shuts, and it starts counting
The same questions come back with the book closed — that run is the one that counts. After it, your coach picks one thing for tonight, sized to the time you have, and brings pages back before you lose them.
Testing effect · Roediger & Karpicke 2006 · spacing effect · Cepeda et al. 2006
Official resources
Straight from F5
Where the exam is defined, scheduled and scored.
1official link
189concepts mapped
The source
F5’s own pages
We link to them rather than repeat them, so nothing here goes stale behind them.
Checked against the source
Every objective on the official F5 outline already has questions here
We build from the official skills outline, not from a summary of it — 40 objectives, 189 concepts written under them, and free questions against every one. When F5 changes the outline, this page changes with it.
40objectives on the outline→189concepts written→659free questions
An official page tells you what will be asked. It cannot tell you what you will get right.
That is the only question worth answering the night before, and no link answers it. You answer it by taking the questions with the book closed, and seeing what comes back.