nerdexam
F5

101 · Question #143

Which of the following protocol protections is not provided by the Protocol Security Manager?

The correct answer is B. SSH. BIG-IP Protocol Security Manager provides deep protocol inspection for FTP, HTTP, SMTP, and several other protocols, but SSH is not among the supported protocols.

Section 2: F5 Solutions and Technology

Question

Which of the following protocol protections is not provided by the Protocol Security Manager?

Options

  • AFTP
  • BSSH
  • CHTTP
  • DSMTP

How the community answered

(50 responses)
  • A
    2% (1)
  • B
    92% (46)
  • C
    2% (1)
  • D
    4% (2)

Why each option

BIG-IP Protocol Security Manager provides deep protocol inspection for FTP, HTTP, SMTP, and several other protocols, but SSH is not among the supported protocols.

AFTP

FTP protocol security is explicitly supported by Protocol Security Manager, providing inspection of FTP commands and responses.

BSSHCorrect

SSH traffic is encrypted at the transport layer, making deep protocol inspection by an application-layer security module infeasible without acting as an SSH proxy. Protocol Security Manager focuses on cleartext or application-layer-inspectable protocols and does not include an SSH compliance engine.

CHTTP

HTTP is a core focus of Protocol Security Manager, covering header validation, method enforcement, and RFC compliance checks.

DSMTP

SMTP protocol protection is supported, allowing enforcement of SMTP command sequences and detection of protocol abuse.

Concept tested: Protocol Security Manager supported protocol coverage

Source: https://techdocs.f5.com/en-us/bigip-asm-implementations/protocol-security-manager-overview.html

Topics

#Protocol Security Manager#PSM protocols#SSH support#protocol coverage

Community Discussion

No community discussion yet for this question.

Full 101 Practice