Which of the following are four of the security benefits of TMOS? (Choose four.)

TMOS does not perform antivirus signature-based scanning - that capability belongs to dedicated modules such as Advanced WAF or third-party integrations, not the core TMOS platform.

TMOS includes built-in rate limiting and protocol validation mechanisms that absorb or block volumetric and protocol-based DDoS attacks. These protections operate at the network and transport layers before traffic reaches backend servers.

TMOS uses SYN cookies to defer TCP state allocation until the handshake completes, protecting against SYN flood attacks. Dynamic connection reapers automatically remove half-open or stale connections to prevent connection table exhaustion.

TMOS does not analyze application logic or provide remediation guidance for poorly written applications - advisory and code-quality functions are outside the scope of the TMOS security model.

TMOS enforces a default-deny posture in which all traffic is blocked unless it matches an explicitly configured virtual server or policy. This eliminates inadvertent exposure of unintended services or ports through the BIG-IP.

Using iRules and stream profiles, TMOS can detect and mask sensitive data such as credit card numbers or PII in outbound responses before they reach clients. This prevents confidential information from leaking in transit or appearing in client-side content.