Which BIG-IP module is responsible for enforcing per-session security policies in an Access Policy?

Question

Options

• ALTM
• BASM
• CAPM
• DAFM

• A
  5% (3)
• B
  2% (1)
• C
  91% (52)
• D
  2% (1)

Explanation

APM (Access Policy Manager) is the BIG-IP module purpose-built for identity and access control - it evaluates per-session security policies that authenticate users, check endpoint posture, and authorize access before granting entry to applications.

Why the distractors are wrong:

• A. LTM (Local Traffic Manager) handles load balancing and traffic routing, not user authentication or session-based access policies.
• B. ASM (Application Security Manager) is a WAF that protects against Layer 7 attacks (SQLi, XSS, etc.) - it inspects traffic content, not user sessions or identity.
• D. AFM (Advanced Firewall Manager) operates at Layers 3–4, enforcing network-level firewall rules, not per-user access sessions.

Memory tip: Think APM = Access Per (session) Manager - the word Access in the module name directly maps to Access Policy, making C the giveaway on any BIG-IP exam.

No community discussion yet for this question.