PracticeVideosBlogFlashcardsEspañol
All Practice Exams

Free Practice Questions for F5 301B BIG-IP LTM

Exam-style questions and explanations by OpenExamPrep.

✓ No registration✓ No credit card
Exam pass rate: F5 Networks does not publicly report pass rates
100+ Questions
100% Free

Loading practice questions...

Same family resources

Explore More F5 Certifications

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.

F5 Certified! Technology Specialist — BIG-IP LTM (Exam 301A)

Practice Questions

F5 201 TMOS Administration

Practice Questions

F5 401 Security Solutions Expert

Practice Questions

F5 402 Cloud Solutions Expert

Practice Questions

F5 Certified! BIG-IP Administrator (F5-CA, exam 201)

Practice Questions

F5 Certified! Solution Expert (F5-CSE)

Practice Questions
Exam Review

Key Facts: F5 301B BIG-IP LTM Exam

80

Exam Questions

Multiple-choice format

150 min

Time Limit

Pearson VUE / Certiverse

245 / 350

Passing Score

Scaled scoring

$180

Exam Fee

Per attempt

F5-CA + 301A

Prerequisites

Active F5-CA AND a 301A pass

4 domains

Blueprint Areas

Approximately 25% each

The F5 301B BIG-IP LTM Specialist: Maintain and Troubleshoot is the second of two LTM specialist exams. The 150-minute test contains 80 multiple-choice questions delivered through Pearson VUE / Certiverse for $180 USD, with a passing score of 245 on a 350-point scaled scale. Candidates must hold an active F5 Certified Administrator credential and have passed F5 301A. The exam covers four equally weighted domains: troubleshoot LTM device issues, troubleshoot LTM connectivity issues, troubleshoot LTM application delivery issues, and maintain system configuration and operations. Earning 301B (combined with 301A) confers the F5 Certified Technology Specialist, BIG-IP LTM (F5-CTS LTM) certification.

Sample F5 301B BIG-IP LTM Practice Questions

Try these sample questions to review concepts for the F5 301B BIG-IP LTM exam. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1An administrator wants to verify the active license features and dossier on a BIG-IP appliance from the CLI. Which TMSH command displays the current license status, including service check date and active feature modules?
A.tmsh show /sys hardware
B.tmsh show /sys license
C.tmsh list /sys provision
D.tmsh show /sys version
Explanation: `tmsh show /sys license` reports the licensed features, the service check date, the registration key, and module entitlements. It is the canonical way to confirm whether a unit is in service and which BIG-IP modules (LTM, AFM, ASM, APM, AVR) are entitled.
2A BIG-IP module is licensed but its features are unavailable. `tmsh show /sys license` confirms the module appears in the entitlements list. What is the MOST likely next step to make the module functional?
A.Re-activate the license
B.Provision the module with `tmsh modify /sys provision <module> level <nominal|minimum|dedicated>`
C.Reboot the active unit
D.Run `tmsh save /sys config`
Explanation: A licensed module must also be provisioned before its daemons start and resources are allocated. `tmsh modify /sys provision <module> level nominal` (or minimum/dedicated) enables the module; provisioning re-allocates CPU/memory and restarts affected services.
3An engineer suspects TMM CPU is saturated under traffic spikes. Which TMSH command exposes per-TMM CPU usage so the engineer can see whether traffic is unevenly distributed across TMM instances?
A.tmsh show /sys cpu
B.tmsh show /sys tmm-info
C.tmsh show /sys hardware
D.tmsh list /sys db
Explanation: `tmsh show /sys tmm-info` shows the per-TMM utilization (TMM0..TMMn), memory usage, and CPU. Uneven utilization across TMMs typically indicates a single-flow elephant connection, an unbalanced disaggregator hash, or a CPU-bound iRule.
4After a configuration change, MCPD fails to start and `tmsh show /sys mcp-state` returns `phase: failed`. Which log file should be examined FIRST to identify the offending object?
A./var/log/audit
B./var/log/ltm
C./var/log/messages
D./var/log/secure
Explanation: MCPD writes load-config errors to `/var/log/ltm`, including the exact object that failed validation. This is the first place to look when MCP fails to reach the running phase. Once the error is found, the object can be fixed in `bigip.conf` or via a partial load.
5A pair of BIG-IP devices is in a sync-failover device group running active-standby. After a split-brain, both units are now active. What is the recommended way to safely return one unit to standby?
A.Reboot the secondary unit
B.Run `tmsh run /cm config-sync to-group` from the surviving unit
C.Use `tmsh run /sys failover standby` on the unit that should yield
D.Disable HA addresses on one unit
Explanation: `tmsh run /sys failover standby` (or its GUI equivalent, Force Offline / Force to Standby) cleanly transitions a unit to standby and releases the floating self IPs and traffic groups. It avoids the disruption of a reboot and preserves running connections on the unit that remains active.
6Which statement BEST describes how an Active-Active deployment is achieved in modern TMOS using device service clustering?
A.Two devices share a single floating self IP that bounces between them
B.Each device hosts a different traffic group, with floating IPs moving between devices on failover
C.Both devices replicate every connection in real time without traffic groups
D.Active-Active requires a third arbitrator device
Explanation: Modern TMOS achieves Active-Active by assigning different traffic groups to different devices in a sync-failover device group. Each traffic group owns a set of floating self IPs, virtual servers, and SNATs, and migrates as a unit on failover. Both devices process traffic simultaneously while each owns its own group.
7An engineer needs to configure two devices to share device trust and configuration but NOT failover state. Which device group type fits this requirement?
A.sync-failover
B.sync-only
C.device-trust
D.ha-only
Explanation: A sync-only device group synchronizes configuration objects (and optionally specific traffic groups) without coupling devices for failover. It is commonly used to push shared management or policy configuration to multiple non-paired devices.
8After enabling configuration sync, an administrator sees that only one device shows up as `In Sync` while the other is stuck at `Awaiting Initial Sync`. Which step BEST resolves this?
A.Reboot the unsynced device
B.Run `tmsh run /cm config-sync to-group <group-name>` from the device with the desired configuration
C.Delete and recreate device trust on both units
D.Run `tmsh save /sys config` on both devices and wait
Explanation: After joining a device group, an initial push is required from the device whose configuration should win. `tmsh run /cm config-sync to-group <group-name>` (or 'Sync to Group' in the GUI) seeds the peer with the local configuration; once accepted, both devices show 'In Sync'.
9An administrator wants to take a complete configuration backup, including SSL keys and the master key, that can later be restored on a replacement BIG-IP. Which artifact should be created?
A.An SCF (Single Configuration File)
B.A UCS archive
C.A qkview snapshot
D.A snapshot of /var/log
Explanation: A UCS (User Configuration Set) archive is the supported full backup. It bundles `bigip.conf`, `bigip_base.conf`, license, master key, SSL keys/certs, custom monitors, iRules, and host data. UCS is the artifact used for disaster recovery and replacement-hardware restores.
10When restoring a UCS file taken from a different BIG-IP appliance onto a new replacement unit, what additional step is REQUIRED for the restored configuration to function correctly?
A.Re-activate the license on the replacement unit
B.Disable provisioning before restore
C.Delete the master key file before restore
D.Run `tmsh save /sys config` immediately
Explanation: License dossiers are tied to the original chassis; restoring a UCS from a different appliance carries an invalid license. The replacement unit must be re-licensed (or restored using the `no-license` option and then licensed). Without a valid license, TMM will not start.

About the F5 301B BIG-IP LTM Exam

The F5 301B BIG-IP LTM Specialist: Maintain and Troubleshoot exam validates an engineer's ability to operate, monitor, and troubleshoot BIG-IP Local Traffic Manager deployments. Topics include LTM device diagnostics (license, provisioning, MCPD, TMM, HA traffic groups), connectivity troubleshooting (VLANs, self IPs, ARP, routing, tcpdump on `0.0` and `0.0:nnn`), application delivery troubleshooting (virtual servers, pools, monitors, HTTP/SSL/TLS profiles, OneConnect, persistence, iRule events and HSL), and maintenance (TMOS upgrades and hotfixes, UCS, SCF, qkview/iHealth, profile tuning, log analysis). It is the second of two LTM Specialist exams paired with 301A.

Exam sponsor: F5 / Pearson VUE / Certiverse. The requirements and fees below concern the certification or admission exam, separate from our free practice resources.

Assessment

80 multiple-choice questions covering LTM device troubleshooting, connectivity troubleshooting, application delivery troubleshooting, and system maintenance. Each domain represents approximately 25% of the exam.

Time Limit

150 minutes

Passing Score

245 / 350 scaled score

Exam / Certification Fees

$180 USD

Exam sponsor website

Reported exam pass rate: F5 Networks does not publicly report pass rates. This describes exam candidates, not OpenExamPrep users or results from using our resources. Exam sponsor website

Fees, eligibility, and exam policies can change. Confirm them with the exam sponsor before applying or paying.

Our practice resources: topics covered

We aim to reflect publicly available exam outlines and topic information in our study resources. Coverage, format, and difficulty may differ from the actual exam, and we cannot guarantee that every detail is accurate or current. Confirm exam requirements, fees, and policies with the official exam sponsor.

25%

Troubleshoot LTM Device Issues

Diagnose license/provisioning, MCPD failures, TMM CPU/memory, HA pair sync and failover, traffic groups, sync-failover and sync-only device groups, CMI sync status, device trust, and connection mirroring.

25%

Troubleshoot LTM Connectivity Issues

Diagnose VLAN/self IP/route problems, ARP, port-lockdown, MAC masquerade, SNAT auto-map vs pools, and packet captures with tcpdump on `0.0` and `0.0:nnn` plus Wireshark analysis (handshake, retransmissions, RST).

25%

Troubleshoot LTM Application Delivery Issues

Diagnose virtual server stats, pool member health, monitor failures, HTTP/OneConnect, persistence (cookie, source-address), SSL/TLS (cipher, chain, SNI, ALPN, HTTP/2), and iRule events (RULE_INIT, CLIENT_ACCEPTED, HTTP_REQUEST, LB_SELECTED, SERVER_CONNECTED, LB_FAILED) and HSL.

25%

Maintain System Configuration and Operations

Plan TMOS upgrades and hotfixes, manage boot locations and `cpcfg`, take and restore UCS, export SCF, generate qkview for iHealth, tune TCP/HTTP/OneConnect profiles, and operate logging via Log Publisher, HSL, syslog, and audit.

Preparing for the F5 301B BIG-IP LTM Exam

What You Need to Know

  • Passing score: 245 / 350 scaled score
  • Assessment: 80 multiple-choice questions covering LTM device troubleshooting, connectivity troubleshooting, application delivery troubleshooting, and system maintenance. Each domain represents approximately 25% of the exam.
  • Time limit: 150 minutes
  • Exam / certification fees: $180 USD Official sources

Using Our Practice Resources

  • Work through all 100 available questions
  • Review every answer and explanation
  • Track weak areas and revisit them
  • Use our AI tutor for tough concepts

F5 301B BIG-IP LTM: Suggested Study Strategy

1Memorize the iRule event order (RULE_INIT once at load; then CLIENT_ACCEPTED -> HTTP_REQUEST -> LB_SELECTED -> SERVER_CONNECTED -> HTTP_RESPONSE; LB_FAILED for retries). Many 301B questions hinge on which event has which data available.
2Practice tcpdump on `0.0` (all TMM interfaces) and `0.0:nnn` (with TMM flag metadata for direction). Know the standard expression for SYN: `tcp[13] & 2 != 0`.
3Drill the differences between Active-Standby (single floating IP) and Active-Active (different traffic groups owned by different devices) and how `force-to-standby` migrates a single traffic group.
4Build muscle memory for diagnostic tmsh commands: `show /sys license`, `show /sys provision`, `show /sys mcp-state`, `show /sys tmm-info`, `show /cm sync-status`, `show /cm traffic-group`, `show /ltm virtual <name>`.
5Understand UCS limitations: UCS includes the master key and SSL keys, but restoring across hardware requires re-activating the license. Always copy UCS off-box before maintenance.
6Know which log file to read for each problem: /var/log/ltm (LTM and MCPD events), /var/log/audit (admin actions), /var/log/messages (kernel/system), /var/log/restjavad (REST), and how to use Log Publisher and HSL for high-volume telemetry.

Frequently Asked Questions

What is the F5 301B BIG-IP LTM Specialist exam?

The F5 301B BIG-IP LTM Specialist: Maintain and Troubleshoot exam validates the ability to maintain, monitor, and troubleshoot F5 BIG-IP Local Traffic Manager deployments. It is the second of two LTM specialist exams, paired with 301A. Passing both 301A and 301B grants the F5 Certified Technology Specialist, BIG-IP LTM credential.

How many questions are on the F5 301B exam and how long is it?

The F5 301B exam contains 80 multiple-choice questions delivered in 150 minutes via Pearson VUE / Certiverse. The passing score is 245 on a 350-point scaled scale. Question weighting is approximately equal across four domains: device, connectivity, application delivery, and maintenance.

What are the prerequisites for F5 301B?

Candidates must hold an active F5 Certified Administrator (F5-CA, exam 201) credential and have passed F5 301A (BIG-IP LTM Specialist: Architect, Setup, and Deploy) before scheduling 301B. Hands-on experience with BIG-IP TMOS, tmsh, iRules, and packet captures is strongly recommended.

How much does the F5 301B exam cost?

The F5 301B exam costs $180 USD per attempt, delivered through Pearson VUE / Certiverse. Test centers and online proctored options are available. F5 generally requires a 15-day waiting period before retakes; check the current Education Services policy for specifics.

What topics are most heavily tested on F5 301B?

All four domains carry roughly equal weight. Expect deep questions on tcpdump on `0.0` and `0.0:nnn`, iRule event order (RULE_INIT, CLIENT_ACCEPTED, HTTP_REQUEST, LB_SELECTED, SERVER_CONNECTED, LB_FAILED), SSL/TLS troubleshooting including SNI and ALPN/HTTP/2, traffic groups and HA failover, MCPD diagnostics, /var/log/ltm and /var/log/audit interpretation, UCS backup/restore (with license re-activation across hardware), and TMOS upgrades using boot locations and `cpcfg`.

How long should I study for the F5 301B exam?

Plan on 60-100 hours of focused study over 6-10 weeks, with significant hands-on lab time. Candidates with strong day-to-day BIG-IP operations experience may study less; those without active production exposure should plan extra lab work covering tcpdump, iRules, and HA failover scenarios.

Does F5 301B require lab time or can I pass with just reading?

Lab time is essentially mandatory. The 301B exam is troubleshooting-focused and tests command-line fluency, packet capture interpretation, iRule event ordering, and HA behavior under failure. F5 study guides recommend hands-on practice with TMOS, tmsh, /var/log/ltm review, and qkview / iHealth workflows.