F5 · Free Practice Questions · Last reviewed May 2026
6real exam-style questions organised by domain, each with the correct answer highlighted and a plain-English explanation of why it's right — and why the others are wrong.
An administrator needs to restrict administrative access to the BIG-IP system so that only specific management workstations can reach the Configuration Utility and SSH. Which control plane mechanism should be configured to implement this access control?
Configure an iRule on the Management Virtual Server.
Enable the 'Allow All' policy in the Device Service Group.
Define a management packet filter policy on the management interface.
Management packet filters act as a host-based firewall for the BIG-IP management interface. By configuring these filters, you explicitly permit or deny traffic based on IP address and port, ensuring that only sanctioned management stations can communicate with the system's SSH and HTTPS administrative services.
Modify the global db variable 'httpd.allowed.ips'.
Refer to the exhibit. An administrator is troubleshooting a failed configuration sync. The log shows a bad argument error related to the management IP. What is the most likely cause?
The TMM process has crashed on the peer.
The peer management IP is not reachable for ConfigSync.
ConfigSync requires reliable reachability between peer management IP addresses. The bad argument error often suggests the system cannot resolve or reach the defined peer management interface, indicating that the sync configuration contains an incorrect IP or a network path issue preventing the synchronization of configuration objects.
The license on the peer has expired.
The NTP server is unreachable.
When a BIG-IP system is in a High Availability (HA) pair, which component is primarily responsible for ensuring that the control plane configuration remains synchronized between devices?
The Traffic Management Microkernel (TMM).
The Configuration Utility (GUI).
The ConfigSync process.
ConfigSync is the specific control plane feature built into BIG-IP to replicate configuration files across redundant devices. It ensures consistency, allowing both units in an HA pair to maintain a synchronized state, which is vital for uninterrupted service during failover scenarios and consistent policy enforcement.
The Linux kernel.
An F5 administrator is tasked with updating the BIG-IP software version. Which pre-update control plane check is the most critical for ensuring a successful deployment?
Clear the browser cache on the management PC.
Verify sufficient disk space on all partitions.
Upgrades require significant disk space to store the new software image, expand files, and maintain backup copies of the existing configuration. Inadequate disk space will cause the installation to fail mid-process, potentially leaving the boot volume in a corrupted or unbootable state, necessitating a complex manual recovery.
Restart all virtual servers.
Rename the default 'admin' account.
Which user role provides the highest level of access within the BIG-IP system, allowing full control over all modules and the underlying Linux operating system?
Operator
Manager
Administrator
The Administrator role grants full, unrestricted access to the BIG-IP system. This includes the ability to configure all modules, manage users, modify system-level settings, and access the Linux shell. It is the most powerful role and requires strict control to ensure the integrity and security of the system.
Resource Administrator
Which protocol is recommended for secure administrative access to the BIG-IP command line interface?
Telnet
SSH
SSH provides a secure, encrypted tunnel for administrative shell access. By utilizing robust authentication and encryption, it ensures that management traffic remains confidential and tamper-proof. It is the mandatory protocol for secure BIG-IP control plane administration, replacing all insecure alternatives to maintain a high security posture.
HTTP
FTP
Want more Control Plane Administration practice?
Practice this domainThe F5CAB4 exam has 60–90 questions and must be completed in 120 minutes. The passing score is 700/1000.
Scenario-based questions covering exam objectives with detailed answer explanations.
The exam covers 1 domain: Control Plane Administration. Questions are weighted by domain — higher-weight domains appear more on your actual exam.
No. These are original exam-style practice questions written against the official F5 F5CAB4 exam objectives. They are not copied from the real exam. Courseiva focuses on genuine understanding, not memorisation of braindumps.
Courseiva tracks your accuracy per domain and routes you toward weak areas automatically. Free, no account required.