You must be able to diagnose and configure BIG-IP control plane functions: management access, service status, SSH ciphers, and sync detection. The most important thing is knowing which service or file controls each function so you can act quickly in scenario-based questions.
Start practicing
Control Plane Administration — choose a session length
Free · No account required
Domain overview
This domain covers BIG-IP control plane administration: managing administrative access, monitoring control plane services, and diagnosing synchronization and configuration issues. Questions present operational scenarios requiring you to identify the correct service, file, or tool to inspect or modify. You must know how the BIG-IP system exposes management functions and how to restrict or troubleshoot them.
Exam objectives
Identifying control plane services such as tmsh, httpd, and mcpd that handle management traffic
Configuring management access restrictions using management IP addresses and access lists
Modifying SSH cipher configuration via /etc/ssh/sshd_config or tmsh
Recognizing control plane components that detect and report device synchronization state
Assuming data plane services like TMM are responsible for management GUI or SSH access issues.
Overlooking that management access restrictions can be applied via both network access lists and administrative partitions.
Confusing synchronization status reporting with data plane health checks, leading to wrong component identification.
Click any question to see the full explanation and answer options, or start a focused practice session above.
An administrator needs to restrict administrative access to the BIG-IP system so that only specific management workstations can reach the Configuration Utility and SSH. Which control plane mechanism should be configured to implement this access control?
2Refer to the exhibit. An administrator is troubleshooting a failed configuration sync. The log shows a bad argument error related to the management IP. What is the most likely cause?
3When a BIG-IP system is in a High Availability (HA) pair, which component is primarily responsible for ensuring that the control plane configuration remains synchronized between devices?
4An F5 administrator is tasked with updating the BIG-IP software version. Which pre-update control plane check is the most critical for ensuring a successful deployment?
5Which user role provides the highest level of access within the BIG-IP system, allowing full control over all modules and the underlying Linux operating system?
6Which protocol is recommended for secure administrative access to the BIG-IP command line interface?
7An administrator notices that the BIG-IP system time is drifting. Why is this critical for control plane stability in an HA configuration?
8Refer to the exhibit. The cluster status is 'Offline'. What is the most likely reason for this state?
9An administrator needs to restrict administrative access to the BIG-IP system so that only specific source IP addresses can reach the Configuration Utility. Which feature should be configured to ensure this security requirement?
10Refer to the exhibit. An administrator notices the BIG-IP VE is experiencing high control plane CPU utilization and slow GUI response. Based on the hardware output, what is the most likely cause if the system is properly sized?
11Which utility should an administrator use to monitor real-time resource consumption on the BIG-IP control plane, specifically for identifying processes consuming high CPU?
12An administrator is planning to upgrade the BIG-IP software. What is the recommended first step to ensure control plane recovery in case of an upgrade failure?
13An administrator needs to securely transfer a large UCS file from the BIG-IP management plane to a remote backup server. Which method is most secure and appropriate for this control plane task?
14Which log file is most useful for troubleshooting administrative login attempts and authentication failures on the BIG-IP control plane?
15Refer to the exhibit. What is the impact of changing this DB variable on the control plane?
16An administrator is unable to access the GUI, but SSH access is still functioning. What is the most appropriate next step for diagnosing the issue?
17When managing multiple BIG-IP devices, why is it recommended to use a centralized NTP server for all devices?
18An administrator wants to restrict the types of ciphers used for SSH access to the BIG-IP system. Which configuration file or tool should be modified?
19An administrator needs to restrict administrative access to the BIG-IP system so that only specific management workstations can reach the Configuration Utility. Which method is the most secure and appropriate control plane configuration?
20Which TWO of the following tasks are performed by the BIG-IP control plane rather than the data plane?
21An administrator observes that the BIG-IP system's management interface is experiencing high CPU utilization. Which process should the administrator investigate first to determine if control plane operations are impacting system performance?
22Refer to the exhibit. The administrator encounters a 'database is locked' error while attempting to push a configuration change. What is the most likely cause?
23Which utility is primarily used for command-line administrative control plane management on a BIG-IP system?
24An administrator needs to perform a massive configuration update. Which command should be used in TMSH to ensure the change is validated before application?
25A BIG-IP device has lost synchronization with its peer. Which control plane component is responsible for detecting this state and reporting it?
26Which file path contains the primary BIG-IP configuration file that the mcpd daemon loads at startup?
27Refer to the exhibit. Why is it important for the administrator to review the 'show sys hardware' output when troubleshooting a control plane issue?
28When modifying the control plane configuration, which action ensures that the changes persist after a system reboot?
29Which THREE services are categorized as control plane services that can be managed via TMSH?
30An administrator is managing multiple BIG-IP devices using a centralized management tool. Which protocol is most commonly used for secure, automated control plane configuration updates?
31A BIG-IP administrator is preparing to upgrade the TMOS software on a device. Before the upgrade, the administrator must ensure that the current configuration is backed up and that the device can be restored if the upgrade fails. Which tmsh command creates a full configuration backup archive that can be used for restoration?
32An administrator is troubleshooting a BIG-IP device that is not responding to configuration changes made via the GUI. The administrator suspects that a control plane service is not running properly. Which two control plane services should the administrator check to ensure that the GUI and configuration management are operational? (Choose two.)
33An administrator needs to add a new VLAN to a BIG-IP device. They want to ensure that the change is saved to the configuration files immediately. Which sequence of TMSH commands should they use?
34An administrator needs to back up the full control-plane configuration of a BIG-IP device, but the security policy forbids storing user password hashes in the archive. The administrator wants a single archive that can later be restored with 'tmsh load sys ucs'. Which action should be performed?
35An administrator is troubleshooting a BIG-IP device that is failing to synchronize configuration changes with its peer. The administrator runs 'tmsh show cm sync-status' and sees 'Changes Pending'. Which action should the administrator take first to identify the cause?
36An administrator is troubleshooting an issue where changes made through the BIG-IP Configuration utility (GUI) are not appearing in the tmsh configuration. The administrator suspects that the GUI and tmsh are using different configuration sources. Which statement correctly describes how the GUI and tmsh interact with the BIG-IP configuration?
37An administrator needs to back up the current BIG-IP configuration to a UCS archive on the local device. Which command should the administrator use?
38An administrator is preparing to upgrade the BIG-IP software on a device that is part of a high-availability pair. Before the upgrade, the administrator needs to ensure that the control plane configuration is backed up and can be restored if necessary. Which command should the administrator use to create a full configuration backup that includes both the configuration files and the license?
39A BIG-IP administrator is configuring a new device and needs to set up the control plane to allow remote management via SSH and HTTPS. The administrator wants to ensure that only secure protocols are used and that access is restricted to specific management IP addresses. Which two actions should the administrator take? (Choose two.)
40An administrator needs to add a new VLAN to a BIG-IP device using TMSH. The administrator wants to ensure the change is immediately active and persisted across reboots. Which command sequence should the administrator use?
You must be able to diagnose and configure BIG-IP control plane functions: management access, service status, SSH ciphers, and sync detection. The most important thing is knowing which service or file controls each function so you can act quickly in scenario-based questions.
The Courseiva F5CAB4 question bank contains 40 questions in the Control Plane Administration domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Control Plane Administration domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included