Which three security controls are used in an SSL transaction? (Choose three.)

Symmetric encryption (e.g., AES) is used in SSL/TLS after the handshake to encrypt bulk session data efficiently, as it is far less computationally expensive than asymmetric operations for large data volumes.

Network admission control (NAC) is a policy enforcement mechanism that governs device access to a network and is entirely separate from the SSL/TLS cryptographic protocol.

Asymmetric encryption (e.g., RSA/ECDHE) is actually a core SSL/TLS component used for key exchange during the handshake - its omission from the listed correct answers appears to be an error in the question.

Digital certificates (X.509) authenticate the server (and optionally the client) during the SSL/TLS handshake and carry the public key used in the asymmetric key exchange phase.

Database encryption is a data-at-rest protection mechanism applied at the storage layer and is unrelated to the SSL/TLS transport security handshake.