Which two policy components are required to block traffic in real time using a dynamic user group (DUG)? (Choose two.)
A Deny policy for the tagged traffic
An Allow policy for the initial traffic
A Decryption policy to decrypt the traffic and see the tag
A Deny policy with the "tag" App-ID to block the tagged traffic
Submit