An organization needs to cryptographically sign its domains. Which F5 product provides this functionality?

F5 GTM (Global Traffic Manager) is the F5 product responsible for DNS-level traffic management and includes DNSSEC (DNS Security Extensions) support, which cryptographically signs DNS resource records using public-key cryptography. This prevents DNS cache poisoning and spoofing by allowing resolvers to validate the authenticity of DNS responses. No other F5 product in the list is designed to manage or secure DNS zone data.

LTM (Local Traffic Manager) handles application load balancing at Layer 4-7 and has no DNS zone signing or DNSSEC capability.

ASM (Application Security Manager) is a web application firewall protecting HTTP/S applications and does not provide DNS cryptographic signing functionality.

APM (Access Policy Manager) manages identity federation, VPN, and access control policies and is unrelated to DNS domain signing.