101 · Question #411
Which item is NOT a function of ASM?
The correct answer is A. Provides authentication and authorization services. ASM (F5 BIG-IP Application Security Manager) is a Web Application Firewall - it does not handle authentication or authorization, which is the role of APM (Access Policy Manager).
Question
Which item is NOT a function of ASM?
Options
- AProvides authentication and authorization services
- BLogs and reports full HTTP messages
- CProvides comprehensive Web application security
- DProvides application level performance information
How the community answered
(66 responses)- A89% (59)
- B6% (4)
- C2% (1)
- D3% (2)
Why each option
ASM (F5 BIG-IP Application Security Manager) is a Web Application Firewall - it does not handle authentication or authorization, which is the role of APM (Access Policy Manager).
Authentication and authorization are not ASM functions - they belong to F5 BIG-IP APM (Access Policy Manager). ASM is a WAF focused on inspecting and protecting HTTP/S traffic at the application layer, not on managing user identity or access control decisions.
ASM does log and report full HTTP request and response messages as part of its traffic learning and security policy enforcement capabilities.
Providing comprehensive web application security is ASM's primary purpose as a WAF, making this a core function.
ASM does provide application-level performance information through its traffic statistics and reporting dashboards.
Concept tested: F5 ASM WAF functions vs APM roles
Source: https://techdocs.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-13-1-0.html
Topics
Community Discussion
No community discussion yet for this question.