Question: What security mechanism shall be supported for protecting non-SBA internal and roaming interfaces, except N32, in a 5G Core network?
Option 1: TLS with pre-shared key authentication
Option 2: IPsec ESP and IKEv2 certificate-based authentication
Option 3: DTLS with public key infrastructure
Option 4: PGP with symmetric key encryption
Explanation: According to the security architecture and procedures for 5G System, non-SBA internal and roaming interfaces, except N32, shall be confidentiality, integrity, and replay protected. IPsec ESP and IKEv2 certificate-based authentication is specified as the supported security mechanism for protecting these interfaces, unless security is provided by other means, such as physical security.