Which two benefits come from assigning a Decryption Profile to a Decryption policy rule with a “No Decrypt” action? (Choose two.)
A . Block sessions with expired certificates
B . Block sessions with client authentication
C . Block sessions with unsupported cipher suites
D . Block sessions with untrusted issuers
E . Block credential phishing
Answer: A,D
Explanation:
https://www.paloaltonetworks.com/documentation/71/pan-os/pan-os/decryption/configure-decryption-exceptions