Which three statements correctly describe Session 380280? (Choose three.)

Palo Alto Networks firewalls initially identify encrypted traffic as 'ssl' before decryption can occur to reveal the actual application.

An 'unknown' end reason typically indicates an issue or abnormal session termination, which is not described as a characteristic of this correctly processed session.

If the application shifted from 'ssl' to 'web-browsing' after initial identification, it means decryption occurred, making this statement false.

After successful SSL decryption, the firewall can accurately identify the underlying application, such as 'web-browsing', demonstrating an application shift.

SSL decryption processing is required for the firewall to inspect the encrypted traffic, perform advanced application identification, and thus allow the application to shift from 'ssl' to 'web-browsing'.