101 · Question #408
Which item is NOT a function of a properly deployed and configured ASM?
The correct answer is B. Stops hackers from attacking. ASM mitigates the impact of attacks by blocking malicious traffic, but it cannot stop threat actors from attempting to attack a system in the first place.
Question
Which item is NOT a function of a properly deployed and configured ASM?
Options
- ADetects attacks
- BStops hackers from attacking
- CProvides protection visibility
- DProvides security agility
How the community answered
(38 responses)- A5% (2)
- B87% (33)
- C3% (1)
- D5% (2)
Why each option
ASM mitigates the impact of attacks by blocking malicious traffic, but it cannot stop threat actors from attempting to attack a system in the first place.
Detecting attacks through signature matching and behavioral anomaly analysis is a primary and well-documented ASM function.
A WAF like ASM operates on traffic that has already reached the application tier; it has no mechanism to prevent a hacker from initiating an attack attempt from the internet. ASM can detect, block, and log malicious requests, but the act of attempting an attack originates outside its control plane. The correct framing is that ASM protects applications from successful exploitation, not from being targeted.
Providing protection visibility via dashboards, logs, and security reports is a core ASM capability that lets administrators monitor threats.
Security agility - the ability to rapidly update policies, signatures, and rules - is a key benefit of a software-based WAF like ASM.
Concept tested: ASM WAF capabilities and inherent limitations
Source: https://techdocs.f5.com/en-us/bigip-15-1-0/big-ip-asm-getting-started-guide/big-ip-application-security-manager-overview.html
Topics
Community Discussion
No community discussion yet for this question.