100+ Free F5 201 TMOS Practice Questions

Pass your F5 Certified Administrator - 201 TMOS Administration exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately

F5 does not publish official pass rates Pass Rate

100+ Questions

100% Free

1 / 100

Question 1

Score: 0/0

A standard virtual server is shown in tmsh as Availability: Available, State: Enabled, with a green status circle. What does this indicate?

The unit is in Forced Offline

The virtual server is administratively disabled

At least one pool member is monitor-up and the virtual server is accepting traffic

No monitor is configured on the pool

to track

Same family resources

Explore More F5 Certifications

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.

2026 Statistics

Key Facts: F5 201 TMOS Exam

Exam Questions

F5 official

245/350

Passing Score

F5 scaled (~70%)

90 min

Time Limit

Pearson VUE delivery

$180

Exam Fee

F5 / Pearson VUE

2 yrs

Certification Valid

F5 recertification policy

F5-CA

Credential Earned

Second of two F5-CA exams

F5 201 TMOS Administration is the second of two F5-CA exams. The test has 80 questions in 90 minutes, requires a 245/350 (~70%) scaled passing score, and costs $180 USD through Pearson VUE/Certiverse. The blueprint covers virtual server troubleshooting (20%), managing existing system configuration (20%), maintaining system configuration (15%), basic hardware (10%), basic performance (10%), basic device management connectivity (10%), reporting current device status (10%), and opening F5 support tickets (5%). Topics range from packet flow and SNAT, through profiles, monitors, persistence, and iRules, to UCS/SCF backups, qkview/iHealth, TMSH, HA failover, and config sync. Recertification is every 2 years.

Sample F5 201 TMOS Practice Questions

Try these sample questions to test your F5 201 TMOS exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1Which BIG-IP component runs the data plane and processes packets entering and leaving a virtual server?

A.TMM (Traffic Management Microkernel)

B.mcpd (Master Control Process Daemon)

C.tmrouted

D.sshd

Explanation: TMM, the Traffic Management Microkernel, is the user-space data plane on BIG-IP. It owns the network interfaces visible to TMOS, runs profiles and iRules, and forwards client and pool traffic. The host kernel underneath is FreeBSD/Linux, but TMM bypasses much of it for performance. mcpd is the configuration arbiter; tmrouted handles dynamic routing protocols; sshd is for management SSH.

2On a multi-CPU BIG-IP, which feature spreads TMM workload across multiple processor cores?

A.CMP (Cluster Multi-Processing)

B.SMP-only kernel scheduling

C.NUMA pinning of mcpd

D.HA group scoring

Explanation: CMP, Cluster Multi-Processing, runs multiple TMM instances - one per CPU core or per NUMA node depending on platform - and distributes new connections across them using disaggregation in hardware or software. CMP is what allows BIG-IP to scale virtual server throughput linearly with cores. mcpd is single-threaded by design.

3A standard virtual server is shown in tmsh as Availability: Available, State: Enabled, with a green status circle. What does this indicate?

A.At least one pool member is monitor-up and the virtual server is accepting traffic

B.No monitor is configured on the pool

C.The virtual server is administratively disabled

D.The unit is in Forced Offline

Explanation: A green status on a virtual server means Availability is Available and State is Enabled - at least one pool member is responding to monitors and the virtual server is accepting traffic. Yellow indicates Unknown (no monitor or monitor pending), red indicates Offline (all members down), and blue indicates Unknown/Available with no monitor. The administrative State must also be Enabled for traffic to flow.

4In BIG-IP status indicators, what does a BLUE circle next to a pool member indicate?

A.Member is up and passing traffic

B.Member status is Unknown - either no monitor is assigned or no monitor result has been returned yet

C.Member is administratively offline

D.Member has failed monitors and is marked down

Explanation: Blue indicates Unknown - either no health monitor is associated with the member (or the parent pool/node), or the monitor has not yet returned a result. Green is Available, red is Offline (monitor failed), yellow indicates that some but not all monitors are reporting, and black indicates Disabled.

5A virtual server is shown with Availability: Available but State: Disabled (Available - Disabled). What is the practical effect on traffic?

A.The VS accepts new connections normally

B.Existing connections persist but new connections are not accepted on this VS

C.All connections are dropped immediately

D.Monitors continue but configuration is locked

Explanation: Available - Disabled means the virtual server is healthy (pool members up) but has been administratively disabled. Existing connections continue to be processed until they close, but no new connections are accepted. This is the recommended state to bleed off traffic before maintenance. Forced Offline drops both new and existing connections.

6A client cannot reach a virtual server. tmsh show ltm virtual <name> shows Availability: Offline. What is the FIRST thing to check?

A.Pool member health (monitor results)

B.BIG-IP licensing

C.NTP synchronization

D.Management interface route

Explanation: Offline on a virtual server means all members of its default pool have failed their monitors, so the BIG-IP refuses new connections. Start by inspecting tmsh show ltm pool <pool> members to see which monitors are failing and why (timeouts, wrong send/receive string, server-side outage). Licensing, NTP, and the management route do not directly mark a virtual server Offline.

7Which of the following correctly describes the packet flow for a TCP client connecting to a standard virtual server with SNAT Automap?

A.Client -> VIP, BIG-IP rewrites destination to a pool member and source to a self-IP, pool member responds to self-IP, BIG-IP rewrites back to client

B.Client -> VIP, BIG-IP forwards untouched at L2 to pool member

C.Client -> pool member directly; BIG-IP only logs

D.Client -> VIP, BIG-IP NATs source to client real IP and destination to floating self-IP

Explanation: With SNAT Automap, BIG-IP DNATs the destination from the VIP to a selected pool member and SNATs the source to a self-IP on the egress VLAN. The pool member sees the self-IP as the client and replies to that self-IP. BIG-IP reverses both translations on return so the client sees its original VIP. Without SNAT, the pool member would reply to the original client IP, and the LTM must be the gateway.

8A virtual server is configured WITHOUT SNAT, pool members are on a different subnet, and the BIG-IP is not the pool members' default gateway. Symptom: clients see SYN sent, no ACK back. What is the cause?

A.Asymmetric return: pool members reply directly to the client and TCP fails

B.Pool members are administratively disabled

C.Wrong service port on the VIP

D.TLS handshake failure

Explanation: Without SNAT, the pool member sees the client's real IP as the source. If the BIG-IP is not its default gateway, the member sends the reply to its own next hop, bypassing the BIG-IP. The client receives a packet from the pool member's IP rather than the VIP and the TCP session fails. The fix is enable SNAT (Automap or pool) or make the BIG-IP the gateway.

9Which monitor type sends an ICMP Echo Request to a node and waits for an Echo Reply?

A.ICMP

B.Echo

C.Gateway ICMP

D.TCP

Explanation: The ICMP monitor sends an ICMP Echo Request (ping) and treats Echo Reply as success. F5 also ships a separate Gateway ICMP monitor specifically for default-route reachability checks. The Echo monitor is a different protocol (UDP/TCP echo service). TCP monitors complete a TCP handshake.

10You need a monitor that sends an HTTP GET / and verifies a specific status string in the response. Which monitor type should you use?

A.TCP

B.HTTP

C.ICMP

D.TCP Half-Open

Explanation: The HTTP monitor lets you set a Send String (e.g., GET / HTTP/1.0\r\n\r\n) and a Receive String to match in the response (e.g., HTTP/1.1 200 OK or a body keyword). TCP and TCP Half-Open only verify port reachability. ICMP cannot inspect application payloads.

About the F5 201 TMOS Exam

The F5 201 TMOS Administration exam is the second of two exams in the F5 Certified Administrator (F5-CA) path. It validates day-to-day administration skills on BIG-IP TMOS: troubleshooting basic virtual server connectivity (status icons, packet flow, profiles, monitors, persistence, iRule events), basic hardware/performance/management issues (LCD/LEDs, qkview, iHealth, tmsh show hardware/cpu/memory/connection, tcpdump), opening F5 support tickets at the right severity, identifying and reporting current device status (HA failover state, config-sync state, time/NTP), and maintaining and managing system configuration (UCS/SCF, HD1.x software volumes, hotfixes, licensing, provisioning, partitions, user roles, TMSH). The legacy F5 101 retired in April 2025; the long-term replacement is the F5CAB1-F5CAB5 series.

Assessment

80 multiple-choice questions covering virtual server troubleshooting, hardware/performance/management connectivity issues, F5 support workflow, current device status, and maintaining/managing system configuration

Time Limit

90 minutes

Passing Score

245/350 (~70%)

Exam Fee

$180 USD (F5 / Pearson VUE / Certiverse)

F5 201 TMOS Exam Content Outline

20%

Troubleshoot Basic Virtual Server Connectivity Issues

Virtual server states, packet flow, SNAT decisions, pool member states, monitors, profiles, persistence, iRule events

20%

Manage Existing System Configuration

TMSH (list ltm virtual ALL, show net interface, show net vlan), partitions, user roles, iApps/iRules, route domains, connection limits

15%

Maintain System Configuration

UCS archives, SCF, software volumes (HD1.x), hotfix install, licensing and add-on provisioning, NTP, DNS, SNMP, master-key encryption

10%

Troubleshoot Basic Hardware Issues

LCD panel, status LEDs, qkview, iHealth upload, tmsh show /sys hardware, interface/trunk diagnostics

10%

Troubleshoot Basic Performance Issues

tmsh show /sys cpu/memory/connection/traffic, tcpdump on 0.0 and 0.0:nnnp, TMM memory triage, server-side latency

10%

Troubleshoot Basic Device Management Connectivity

Out-of-band mgmt vs self-IPs, mgmt allow-list, authentication (Local DB, RADIUS, TACACS+, LDAP, AD, SSL Cert)

10%

Identify and Report Current Device Status

Failover-status, In Sync/Awaiting Initial Sync/Disconnected/Changes Pending, hardware vs unicast vs multicast failover, NTP

Open a Support Ticket with F5

F5 Support / MyF5 portal, severity levels Sev 1-4, required artefacts including qkview/iHealth case ID

How to Pass the F5 201 TMOS Exam

What You Need to Know

Passing score: 245/350 (~70%)
Assessment: 80 multiple-choice questions covering virtual server troubleshooting, hardware/performance/management connectivity issues, F5 support workflow, current device status, and maintaining/managing system configuration
Time limit: 90 minutes
Exam fee: $180 USD

Keys to Passing

Complete 500+ practice questions
Score 80%+ consistently before scheduling
Focus on highest-weighted sections
Use our AI tutor for tough concepts

F5 201 TMOS Study Tips from Top Performers

1Memorise pool member status colours: green = up, yellow = some monitors failing, red = monitor failed (Offline), blue = Unknown (no monitor result yet), black = Disabled - status icons appear in many 201 questions

2Master the SNAT-required packet-flow scenario: pool members on a different subnet without the BIG-IP as gateway need SNAT (Automap or pool) or traffic returns asymmetrically

3Practise the qkview workflow end-to-end: tmsh save sys ucs for backup, qkview -s 0 for diagnostics, transfer to a workstation, upload to ihealth.f5.com, attach to a MyF5 case

4Know the difference between UCS (binary, includes license, certs, system files) and SCF (text, no license/system files) and when each is used - migration uses SCF; like-for-like restore uses UCS

5Keep a TMSH cheat sheet of show /sys hardware, /sys cpu, /sys memory, /sys connection, /sys traffic, /cm failover-status, list ltm virtual all - the 201 exam tests command recognition

6Learn F5 Support severity levels (Sev 1 production down, Sev 2 impaired with workaround, Sev 3 impaired, Sev 4 informational) and what each case requires - severity selection is testable

Frequently Asked Questions

What is the F5 201 TMOS Administration exam?

The F5 201 TMOS Administration exam is the second of two exams required for the F5 Certified Administrator (F5-CA) credential. It validates day-to-day BIG-IP administration tasks: troubleshooting virtual server connectivity, hardware, performance, and device management; opening support tickets; identifying device status; and maintaining and managing system configuration. The exam has 80 questions in 90 minutes, requires a 245/350 (~70%) scaled passing score, and costs $180 USD through Pearson VUE / Certiverse.

What are the prerequisites for the F5 201 exam?

Historically, candidates needed to pass the F5 101 Application Delivery Fundamentals exam before 201. F5 retired the legacy 101 in April 2025; the long-term replacement is the F5CAB1-F5CAB5 series. Check education.f5.com for the current prerequisite path before scheduling. Hands-on experience with BIG-IP TMOS, ideally 6-12 months administering virtual servers, profiles, monitors, and HA, is strongly recommended.

What topics are on the F5 201 TMOS exam?

The blueprint covers eight weighted domains: troubleshooting virtual server connectivity (20%), managing existing system configuration (20%), maintaining system configuration (15%), basic hardware (10%), basic performance (10%), basic device management connectivity (10%), reporting current device status (10%), and opening F5 support tickets (5%). Specific topics include virtual server states, packet flow, SNAT, pool monitors, profiles (HTTP, FastL4, FastHTTP, OneConnect, Stream), iRule events, TMSH, UCS/SCF, qkview/iHealth, software volumes (HD1.x), HA, and config sync.

How much does the F5 201 exam cost and how long is it?

The F5 201 TMOS Administration exam costs $180 USD per attempt and is delivered through Pearson VUE / Certiverse, in-person or online proctored. The exam has 80 multiple-choice questions in a 90-minute window. The passing score is 245 out of 350 on a scaled scale, which is approximately 70%. F5 does not publish official pass rates.

How long is the F5-CA certification valid?

The F5 Certified Administrator credential is valid for 2 years from the issue date. To recertify, candidates must pass the current F5-CA exams (or an active higher-level F5 specialist exam such as 301A or 301B) before the expiration date. Maintaining the F5-CA is a prerequisite for the F5 specialist tracks (LTM, DNS, ASM, APM).

What hands-on tools should I practice for F5 201?

Spend lab time with TMSH (list ltm virtual all, show net interface/vlan, show /sys cpu/memory/connection/traffic/hardware), generate qkview files and upload them to ihealth.f5.com, capture packets with tcpdump on 0.0 and 0.0:nnnp, save and restore UCS archives and SCF files, install hotfixes/images into HD1.x volumes, and walk through Active/Standby failover and config sync states. A free BIG-IP VE trial is the recommended lab environment.

How should I prepare for the F5 201 exam?

Read the official F5 201 study guide and content blueprint at education.f5.com, build a BIG-IP VE lab to practise TMSH and qkview, study the F5-supplied troubleshooting workflows (virtual server status icons, packet flow, monitors), review F5 Support severity levels and the iHealth/MyF5 case-opening process, and use practice exams to find weak areas. Plan 60-100 hours over 6-10 weeks. Hands-on TMSH and tcpdump familiarity is the single biggest score boost.

100+ Free F5 201 TMOS Practice Questions

Explore More F5 Certifications

F5 301B BIG-IP LTM Specialist Maintain & Troubleshoot

F5 401 Security Solutions Expert

F5 402 Cloud Solutions Expert

F5 Certified! BIG-IP Administrator (F5-CA, exam 201)

F5 Certified! Solution Expert (F5-CSE)

F5 Certified! Technical Professional (F5-CTP)