Is attack surface management the same as exposure management?

No. Attack surface management discovers and monitors assets and potential entry points. Exposure management uses ASM and other security data to identify, prioritize, and reduce the conditions most likely to support a damaging attack.