Which two statements correctly describe Session 380280? (Choose two.)

A session log indicating SSL decryption typically shows an explicit 'decrypted' flag, an 'action' of 'decrypt', or related fields (e.g., 'ssl_proxy') signifying that the firewall successfully intercepted, decrypted, inspected, and then re-encrypted the SSL/TLS traffic.

The 'end-reason' field in a session log provides a specific reason for session termination (e.g., 'aged-out', 'rst-client'); if it was 'unknown', it would be explicitly stated, and this is generally an atypical end reason for a functional session.

The 'app' field in a session log identifies the application detected for the traffic; if it shows 'web-browsing', it means the firewall successfully identified the application as standard HTTP/HTTPS web traffic based on its application-identification signatures.

This statement directly contradicts option A, which specifies that the session did go through SSL decryption processing; a session cannot simultaneously be decrypted and not decrypted.