Which two of the following does decryption broker provide on a NGFW? (Choose two.)

Which two of the following does decryption broker provide on a NGFW? (Choose two.)
A . Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic only once
B . Eliminates the need for a third party SSL decryption option which allows you to reduce the total number of third party devices performing analysis and enforcement
C . Provides a third party SSL decryption option which allows you to increase the total number of third party devices performing analysis and enforcement
D . Decryption broker allows you to offload SSL decryption to the Palo Alto Networks next-generation firewall and decrypt traffic multiple times

Answer: A,B

Explanation:

Reference: https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-admin/decryption/decryption-broker.html