Question: In the context of Network Domain Security (NDS) using the Bridge CA model, what is the primary purpose of the two-step process involving authentication and access control when establishing trust between operators?
Option 1: To eliminate the need for configuring roaming information in Security Gateways (SEGs)
Option 2: To differentiate between PKI-provided trust and trust based on roaming agreements, ensuring secure tunnel configuration
Option 3: To simplify cross-certification by removing the requirement for individual operator certifications
Option 4: To enhance User Equipment (UE) authentication security during roaming
Explanation: The correct answer highlights the crucial distinction between trust established through Public Key Infrastructure (PKI) and that based on roaming agreements. This differentiation is vital for securely configuring IPsec tunnels, as merely trusting a bridge does not automatically imply trust in all connected operators for roaming purposes.