Question: What is a specific requirement for a vendor's root Certificate Authority (CA) in the context of Network Domain Security (NDS), differing from interconnection CA certificate profiles?
Option 1: The vendor must use a unique identifier for each device.
Option 2: The vendor shall support distribution of certificate revocation information.
Option 3: The vendor is exempt from providing any form of certificate validation.
Option 4: The vendor's root CA must be renewed annually.
Explanation: In the context of Network Domain Security (NDS), specifically for a vendor's root Certificate Authority (CA), supporting the distribution of certificate revocation information is crucial. This ensures that any compromised or invalid certificates can be efficiently identified and revoked, maintaining the security integrity of the network.