Question: In Network Domain Security (NDS) for Authentication Framework (AF), what protocol is mandated for providing certificate lifecycle management capabilities for Security Gateways (SEGs), Network Entities (NEs), and Transport Layer Security (TLS) entities?
Option 1: PKCS#10
Option 2: CMPv1 (RFC 2510)
Option 3: SCEP (Simple Certificate Enrollment Protocol)
Option 4: CMPv2 (Certificate Management Protocol version 2)
Explanation: The correct answer is CMPv2 because, according to the specifications for Network Domain Security (NDS) in the context of Authentication Framework (AF), CMPv2 is explicitly stated as the supported protocol for managing the certificate lifecycle of SEGs, NEs, and TLS entities. This preference over other protocols like PKCS#10 or CMPv1 is due to its enhanced interoperability features, which are crucial for seamless security operations across different network elements.