Which of the following methods of protection are used by the BIG-IP ASM System to mitigate buffer overflow attacks?

HTTP RFC compliancy checks validate protocol formatting but do not directly address input length abuse that characterizes buffer overflow attacks.

Length restrictions prevent attackers from sending oversized payloads that could overflow buffers by enforcing maximum allowed lengths on parameters, headers, and URLs, while attack signatures detect known buffer overflow exploit patterns in request content, providing a layered defense.

Site cookie compliancy checks verify cookie integrity and are unrelated to blocking oversized input payloads used in buffer overflow exploits.

Metacharacter enforcement restricts special characters and, while useful for injection attacks, does not address the excessive length of data that defines a buffer overflow attack.