Which statement about the Cisco ASA CX role in inspecting SSL traffic is true?

Which statement about the Cisco ASA CX role in inspecting SSL traffic is true?

A.
To decrypt traffic, the Cisco ASA CX must accept the websites’ certificates as Trusted Root Cas.

B.
If the administrator elects to decrypt traffic, the Cisco ASA CX acts as a man-in—me-middle.

C.
Either all traffic is decrypted, or no traffic is decrypted by the Cisco ASA CX.

D.
The traffic is encrypted, so the Cisco ASA CX cannot determine the content of the traffic.