An organization needs to protect its data center from layer three-based and layer four-based exploits. Which F5 product provides this functionality

AFM is F5's high-performance network firewall module that operates at OSI Layers 3 and 4, providing stateful packet inspection, IP reputation filtering, DoS/DDoS mitigation, and access control lists against TCP/UDP/IP-based exploits. It is purpose-built for data center perimeter defense at the network and transport layers, directly addressing the requirement described.

ASM (Application Security Manager) is a Layer 7 web application firewall targeting HTTP-based threats such as SQL injection and XSS, not Layer 3/4 network exploits.

GTM (Global Traffic Manager) is a DNS-based global load balancing solution and provides no firewall or exploit-protection functionality.

APM (Access Policy Manager) handles user identity, authentication, and application access control, not network-layer packet filtering or exploit protection.