Question: What should the network do with UE capabilities acquired through RRC UE capability transfer procedure before AS security activation, except for unauthenticated emergency calls and UEs using Control plane CIoT optimization?
Option 1: Store them locally for later use
Option 2: Send them to other network entities for processing
Option 3: Discard them immediately
Option 4: Re-run the RRC UE capability transfer procedure after a successful AS SMC procedure
Explanation: According to the security procedures, if the network had acquired UE capabilities before AS security activation, it should not store or send them. Instead, it should re-run the RRC UE capability transfer procedure after a successful AS SMC procedure to ensure secure communication.