How are Access Policy Timeouts related to security in BIG-IP APM?

Question

Options

• ALonger timeouts enhance security by allowing more time for user authentication.
• BShorter timeouts improve security by automatically logging out idle users.
• CTimeouts do not impact security but affect user experience only.
• DTimeouts are security features that prevent unauthorized access to applications.

• A
  3% (2)
• B
  89% (54)
• C
  7% (4)
• D
  2% (1)

Explanation

Shorter timeouts improve security in BIG-IP APM because idle sessions represent open attack vectors - if a user walks away from an authenticated session, a shorter timeout automatically terminates it, reducing the window for unauthorized access or session hijacking. Option A is wrong because longer timeouts weaken security by leaving sessions open longer than necessary. Option C is wrong because timeouts directly impact security, not just user experience - idle session management is a core security control. Option D is misleading; while timeouts are a security mechanism, their specific value lies in terminating idle sessions, not broadly "preventing unauthorized access" in a general sense.

Memory tip: Think of it like a bank ATM - it logs you out after inactivity specifically so the next person in line can't access your account. Short timeout = short exposure window.

No community discussion yet for this question.