Which two benefits come from assigning a Decryption Profile to a Decryption policy rule with a “No Decrypt” action? (Choose two.)

Which two benefits come from assigning a Decryption Profile to a Decryption policy rule with a “No Decrypt” action? (Choose two.)
A . Block sessions with expired certificates
B . Block sessions with client authentication
C . Block sessions with unsupported cipher suites
D . Block sessions with untrusted issuers
E . Block credential phishing

View Answer

Answer: A,D

Explanation:

https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/decryption/configure-decryption-exceptions