Question: What is a mandatory security feature for the reference point Zh between the Bootstrapping Server Function (BSF) and the Home Subscriber Server (HSS), as per Generic Authentication Architecture requirements?
Option 1: Mutual Authentication, Confidentiality, and Integrity
Option 2: Data Encryption and Access Control only
Option 3: Secure Sockets Layer/Transport Layer Security (SSL/TLS) alone
Option 4: Firewall Protection for Network Segmentation
Explanation: The correct answer is Option 1 because, according to the Generic Authentication Architecture (GAA) requirements for reference point Zh, mutual authentication, confidentiality, and integrity must be provided. This ensures a secure communication channel between the BSF and HSS within the same operator's network, protecting sensitive subscriber information and bootstrapping data. While other options may enhance security in different contexts, they do not meet the specific mandatory requirement outlined for reference point Zh.