Question: What is the primary authentication method used by a UE before onboarding is allowed, and where are the credentials or means to authenticate the UE based on Default UE credentials stored?
Option 1: The primary authentication method is performed using a SIM card, and the credentials are stored within the UE.
Option 2: The primary authentication method is performed using a username and password, and the credentials are stored in a centralized database.
Option 3: The primary authentication method is performed using biometric data, and the credentials are stored on a secure server.
Option 4: The primary authentication method uses Default UE credentials, and the credentials or means to authenticate the UE may be stored within the ON-SNPN or in a Default Credentials Server (DCS) that is external to the ON-SNPN.
Explanation: According to the security architecture and procedures for 5G System, primary authentication shall be performed before UE onboarding is allowed. The UE uses Default UE credentials for primary authentication, which may be stored within the ON-SNPN or in a Default Credentials Server (DCS) that is external to the ON-SNPN.