Question: What type of authentication procedure may be triggered by the ON-SNPN after successful primary authentication without using DCS?
Option 1: Primary authentication using DCS
Option 2: Secondary authentication using Default UE credentials
Option 3: Certificate-based authentication for primary and secondary authentication with different client certificates
Option 4: EAP-TLS authentication for primary authentication only
Explanation: After successful primary authentication without using DCS, the ON-SNPN may trigger a secondary authentication procedure to further verify the UE's identity. This secondary authentication uses Default UE credentials, which can be configured to use the same client certificates as primary authentication if required by the use case.