asm practices for CPU/ memory tuning

You are correct about Data Guard because ASM has to process HTTP responses. The same applies to applying attack signatures to responses. Also be aware that logging can affect performance under heavy load. So the recommendation is to not log data locally. Generally, activity that generates learning suggestions will cause more CPU, especially if the application is changing frequently and/or there are many requests.