F5CAB4 · domain
Control Plane Administration
This domain covers BIG-IP control plane administration: managing administrative access, monitoring control plane services, and diagnosing synchronization and configuration issues. Questions present operational scenarios requiring you to identify the correct service, file, or tool to inspect or modify. You must know how the BIG-IP system exposes management functions and how to restrict or troubleshoot them.
Focused practice
Practice Control Plane Administration questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about Control Plane Administration
You must be able to diagnose and configure BIG-IP control plane functions: management access, service status, SSH ciphers, and sync detection. The most important thing is knowing which service or file controls each function so you can act quickly in scenario-based questions.
Identifying control plane services such as tmsh, httpd, and mcpd that handle management traffic
Configuring management access restrictions using management IP addresses and access lists
Modifying SSH cipher configuration via /etc/ssh/sshd_config or tmsh
Recognizing control plane components that detect and report device synchronization state
Watch out for
Common Control Plane Administration exam traps
- ▸Assuming data plane services like TMM are responsible for management GUI or SSH access issues.
- ▸Overlooking that management access restrictions can be applied via both network access lists and administrative partitions.
- ▸Confusing synchronization status reporting with data plane health checks, leading to wrong component identification.
Question index
All Control Plane Administration questions (40)
Click any question to see the full explanation, or start a practice session above.
An administrator needs to restrict administrative access to the BIG-IP system so that only specific management workstations can reach the Configuration Utility. Which method is the most secure and appropriate control plane configuration?
Medium2An administrator is preparing to upgrade the BIG-IP software on a device that is part of a high-availability pair. Before the upgrade, the administrator needs to ensure that the control plane configuration is backed up and can be restored if necessary. Which command should the administrator use to create a full configuration backup that includes both the configuration files and the license?
Hard3An administrator is unable to access the GUI, but SSH access is still functioning. What is the most appropriate next step for diagnosing the issue?
Hard4Refer to the exhibit. The cluster status is 'Offline'. What is the most likely reason for this state?
Medium5An administrator is troubleshooting a BIG-IP device that is failing to synchronize configuration changes with its peer. The administrator runs 'tmsh show cm sync-status' and sees 'Changes Pending'. Which action should the administrator take first to identify the cause?
Hard6Refer to the exhibit. Why is it important for the administrator to review the 'show sys hardware' output when troubleshooting a control plane issue?
Hard7A BIG-IP administrator is preparing to upgrade the TMOS software on a device. Before the upgrade, the administrator must ensure that the current configuration is backed up and that the device can be restored if the upgrade fails. Which tmsh command creates a full configuration backup archive that can be used for restoration?
Hard8An administrator observes that the BIG-IP system's management interface is experiencing high CPU utilization. Which process should the administrator investigate first to determine if control plane operations are impacting system performance?
Medium9A BIG-IP device has lost synchronization with its peer. Which control plane component is responsible for detecting this state and reporting it?
Medium10An administrator is planning to upgrade the BIG-IP software. What is the recommended first step to ensure control plane recovery in case of an upgrade failure?
Medium11An administrator needs to add a new VLAN to a BIG-IP device using TMSH. The administrator wants to ensure the change is immediately active and persisted across reboots. Which command sequence should the administrator use?
Medium12An administrator needs to back up the current BIG-IP configuration to a UCS archive on the local device. Which command should the administrator use?
Easy13An administrator needs to add a new VLAN to a BIG-IP device. They want to ensure that the change is saved to the configuration files immediately. Which sequence of TMSH commands should they use?
Medium14Refer to the exhibit. What is the impact of changing this DB variable on the control plane?
Medium15Which utility is primarily used for command-line administrative control plane management on a BIG-IP system?
Easy16When modifying the control plane configuration, which action ensures that the changes persist after a system reboot?
Medium17An administrator is troubleshooting an issue where changes made through the BIG-IP Configuration utility (GUI) are not appearing in the tmsh configuration. The administrator suspects that the GUI and tmsh are using different configuration sources. Which statement correctly describes how the GUI and tmsh interact with the BIG-IP configuration?
Easy18Which user role provides the highest level of access within the BIG-IP system, allowing full control over all modules and the underlying Linux operating system?
Medium19Which file path contains the primary BIG-IP configuration file that the mcpd daemon loads at startup?
Easy20Which utility should an administrator use to monitor real-time resource consumption on the BIG-IP control plane, specifically for identifying processes consuming high CPU?
Easy21When managing multiple BIG-IP devices, why is it recommended to use a centralized NTP server for all devices?
Medium22An administrator notices that the BIG-IP system time is drifting. Why is this critical for control plane stability in an HA configuration?
Medium23An administrator needs to securely transfer a large UCS file from the BIG-IP management plane to a remote backup server. Which method is most secure and appropriate for this control plane task?
Hard24Refer to the exhibit. An administrator is troubleshooting a failed configuration sync. The log shows a bad argument error related to the management IP. What is the most likely cause?
Medium25Refer to the exhibit. An administrator notices the BIG-IP VE is experiencing high control plane CPU utilization and slow GUI response. Based on the hardware output, what is the most likely cause if the system is properly sized?
Hard26Which protocol is recommended for secure administrative access to the BIG-IP command line interface?
Easy27An F5 administrator is tasked with updating the BIG-IP software version. Which pre-update control plane check is the most critical for ensuring a successful deployment?
Medium28An administrator is troubleshooting a BIG-IP device that is not responding to configuration changes made via the GUI. The administrator suspects that a control plane service is not running properly. Which two control plane services should the administrator check to ensure that the GUI and configuration management are operational? (Choose two.)
Medium29An administrator needs to back up the full control-plane configuration of a BIG-IP device, but the security policy forbids storing user password hashes in the archive. The administrator wants a single archive that can later be restored with 'tmsh load sys ucs'. Which action should be performed?
Medium30An administrator wants to restrict the types of ciphers used for SSH access to the BIG-IP system. Which configuration file or tool should be modified?
Medium31When a BIG-IP system is in a High Availability (HA) pair, which component is primarily responsible for ensuring that the control plane configuration remains synchronized between devices?
Easy32An administrator needs to restrict administrative access to the BIG-IP system so that only specific management workstations can reach the Configuration Utility and SSH. Which control plane mechanism should be configured to implement this access control?
Medium33Refer to the exhibit. The administrator encounters a 'database is locked' error while attempting to push a configuration change. What is the most likely cause?
Hard34An administrator needs to restrict administrative access to the BIG-IP system so that only specific source IP addresses can reach the Configuration Utility. Which feature should be configured to ensure this security requirement?
Medium35Which THREE services are categorized as control plane services that can be managed via TMSH?
Hard36Which log file is most useful for troubleshooting administrative login attempts and authentication failures on the BIG-IP control plane?
Medium37Which TWO of the following tasks are performed by the BIG-IP control plane rather than the data plane?
Medium38An administrator needs to perform a massive configuration update. Which command should be used in TMSH to ensure the change is validated before application?
Hard39A BIG-IP administrator is configuring a new device and needs to set up the control plane to allow remote management via SSH and HTTPS. The administrator wants to ensure that only secure protocols are used and that access is restricted to specific management IP addresses. Which two actions should the administrator take? (Choose two.)
Medium40An administrator is managing multiple BIG-IP devices using a centralized management tool. Which protocol is most commonly used for secure, automated control plane configuration updates?
MediumFrequently asked questions
- What does the Control Plane Administration domain cover on the F5CAB4 exam?
- You must be able to diagnose and configure BIG-IP control plane functions: management access, service status, SSH ciphers, and sync detection. The most important thing is knowing which service or file controls each function so you can act quickly in scenario-based questions.
- How many questions are in this domain?
- This page lists all 40 Control Plane Administration questions in the F5CAB4 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Control Plane Administration questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.