Which statement about HTTPS decryption on the WSA is true？（） 

• A、if enabled， all HTTPS traffic must be decrypted
• B、if WBRS is enabled， it can be used to determine whether the HTTPS traffic is to be decrypted
• C、decrypted HTTPS traffic is sent unencrypted across the enterprise intranet
• D、object size can be used to determine whether the HTTPS traffic is to be decrypted