Courseiva

F5CAB4 · domain

Control Plane Administration

This domain covers BIG-IP control plane administration: managing administrative access, monitoring control plane services, and diagnosing synchronization and configuration issues. Questions present operational scenarios requiring you to identify the correct service, file, or tool to inspect or modify. You must know how the BIG-IP system exposes management functions and how to restrict or troubleshoot them.

40 questions7 easy23 medium10 hard

Focused practice

Practice Control Plane Administration questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about Control Plane Administration

You must be able to diagnose and configure BIG-IP control plane functions: management access, service status, SSH ciphers, and sync detection. The most important thing is knowing which service or file controls each function so you can act quickly in scenario-based questions.

Identifying control plane services such as tmsh, httpd, and mcpd that handle management traffic

Configuring management access restrictions using management IP addresses and access lists

Modifying SSH cipher configuration via /etc/ssh/sshd_config or tmsh

Recognizing control plane components that detect and report device synchronization state

Watch out for

Common Control Plane Administration exam traps

  • ▸Assuming data plane services like TMM are responsible for management GUI or SSH access issues.
  • ▸Overlooking that management access restrictions can be applied via both network access lists and administrative partitions.
  • ▸Confusing synchronization status reporting with data plane health checks, leading to wrong component identification.

Question index

All Control Plane Administration questions (40)

Click any question to see the full explanation, or start a practice session above.

1

An administrator needs to restrict administrative access to the BIG-IP system so that only specific management workstations can reach the Configuration Utility. Which method is the most secure and appropriate control plane configuration?

Medium
2

An administrator is preparing to upgrade the BIG-IP software on a device that is part of a high-availability pair. Before the upgrade, the administrator needs to ensure that the control plane configuration is backed up and can be restored if necessary. Which command should the administrator use to create a full configuration backup that includes both the configuration files and the license?

Hard
3

An administrator is unable to access the GUI, but SSH access is still functioning. What is the most appropriate next step for diagnosing the issue?

Hard
4

Refer to the exhibit. The cluster status is 'Offline'. What is the most likely reason for this state?

Medium
5

An administrator is troubleshooting a BIG-IP device that is failing to synchronize configuration changes with its peer. The administrator runs 'tmsh show cm sync-status' and sees 'Changes Pending'. Which action should the administrator take first to identify the cause?

Hard
6

Refer to the exhibit. Why is it important for the administrator to review the 'show sys hardware' output when troubleshooting a control plane issue?

Hard
7

A BIG-IP administrator is preparing to upgrade the TMOS software on a device. Before the upgrade, the administrator must ensure that the current configuration is backed up and that the device can be restored if the upgrade fails. Which tmsh command creates a full configuration backup archive that can be used for restoration?

Hard
8

An administrator observes that the BIG-IP system's management interface is experiencing high CPU utilization. Which process should the administrator investigate first to determine if control plane operations are impacting system performance?

Medium
9

A BIG-IP device has lost synchronization with its peer. Which control plane component is responsible for detecting this state and reporting it?

Medium
10

An administrator is planning to upgrade the BIG-IP software. What is the recommended first step to ensure control plane recovery in case of an upgrade failure?

Medium
11

An administrator needs to add a new VLAN to a BIG-IP device using TMSH. The administrator wants to ensure the change is immediately active and persisted across reboots. Which command sequence should the administrator use?

Medium
12

An administrator needs to back up the current BIG-IP configuration to a UCS archive on the local device. Which command should the administrator use?

Easy
13

An administrator needs to add a new VLAN to a BIG-IP device. They want to ensure that the change is saved to the configuration files immediately. Which sequence of TMSH commands should they use?

Medium
14

Refer to the exhibit. What is the impact of changing this DB variable on the control plane?

Medium
15

Which utility is primarily used for command-line administrative control plane management on a BIG-IP system?

Easy
16

When modifying the control plane configuration, which action ensures that the changes persist after a system reboot?

Medium
17

An administrator is troubleshooting an issue where changes made through the BIG-IP Configuration utility (GUI) are not appearing in the tmsh configuration. The administrator suspects that the GUI and tmsh are using different configuration sources. Which statement correctly describes how the GUI and tmsh interact with the BIG-IP configuration?

Easy
18

Which user role provides the highest level of access within the BIG-IP system, allowing full control over all modules and the underlying Linux operating system?

Medium
19

Which file path contains the primary BIG-IP configuration file that the mcpd daemon loads at startup?

Easy
20

Which utility should an administrator use to monitor real-time resource consumption on the BIG-IP control plane, specifically for identifying processes consuming high CPU?

Easy
21

When managing multiple BIG-IP devices, why is it recommended to use a centralized NTP server for all devices?

Medium
22

An administrator notices that the BIG-IP system time is drifting. Why is this critical for control plane stability in an HA configuration?

Medium
23

An administrator needs to securely transfer a large UCS file from the BIG-IP management plane to a remote backup server. Which method is most secure and appropriate for this control plane task?

Hard
24

Refer to the exhibit. An administrator is troubleshooting a failed configuration sync. The log shows a bad argument error related to the management IP. What is the most likely cause?

Medium
25

Refer to the exhibit. An administrator notices the BIG-IP VE is experiencing high control plane CPU utilization and slow GUI response. Based on the hardware output, what is the most likely cause if the system is properly sized?

Hard
26

Which protocol is recommended for secure administrative access to the BIG-IP command line interface?

Easy
27

An F5 administrator is tasked with updating the BIG-IP software version. Which pre-update control plane check is the most critical for ensuring a successful deployment?

Medium
28

An administrator is troubleshooting a BIG-IP device that is not responding to configuration changes made via the GUI. The administrator suspects that a control plane service is not running properly. Which two control plane services should the administrator check to ensure that the GUI and configuration management are operational? (Choose two.)

Medium
29

An administrator needs to back up the full control-plane configuration of a BIG-IP device, but the security policy forbids storing user password hashes in the archive. The administrator wants a single archive that can later be restored with 'tmsh load sys ucs'. Which action should be performed?

Medium
30

An administrator wants to restrict the types of ciphers used for SSH access to the BIG-IP system. Which configuration file or tool should be modified?

Medium
31

When a BIG-IP system is in a High Availability (HA) pair, which component is primarily responsible for ensuring that the control plane configuration remains synchronized between devices?

Easy
32

An administrator needs to restrict administrative access to the BIG-IP system so that only specific management workstations can reach the Configuration Utility and SSH. Which control plane mechanism should be configured to implement this access control?

Medium
33

Refer to the exhibit. The administrator encounters a 'database is locked' error while attempting to push a configuration change. What is the most likely cause?

Hard
34

An administrator needs to restrict administrative access to the BIG-IP system so that only specific source IP addresses can reach the Configuration Utility. Which feature should be configured to ensure this security requirement?

Medium
35

Which THREE services are categorized as control plane services that can be managed via TMSH?

Hard
36

Which log file is most useful for troubleshooting administrative login attempts and authentication failures on the BIG-IP control plane?

Medium
37

Which TWO of the following tasks are performed by the BIG-IP control plane rather than the data plane?

Medium
38

An administrator needs to perform a massive configuration update. Which command should be used in TMSH to ensure the change is validated before application?

Hard
39

A BIG-IP administrator is configuring a new device and needs to set up the control plane to allow remote management via SSH and HTTPS. The administrator wants to ensure that only secure protocols are used and that access is restricted to specific management IP addresses. Which two actions should the administrator take? (Choose two.)

Medium
40

An administrator is managing multiple BIG-IP devices using a centralized management tool. Which protocol is most commonly used for secure, automated control plane configuration updates?

Medium

Frequently asked questions

What does the Control Plane Administration domain cover on the F5CAB4 exam?
You must be able to diagnose and configure BIG-IP control plane functions: management access, service status, SSH ciphers, and sync detection. The most important thing is knowing which service or file controls each function so you can act quickly in scenario-based questions.
How many questions are in this domain?
This page lists all 40 Control Plane Administration questions in the F5CAB4 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only Control Plane Administration questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
f5-caB4-control-plane-admin F5-CAB4-CONTROL-PLANE-ADMIN control plane administration Practice Questions