Question: In a Lawful Interception (LI) scenario, as per 3GPP specifications, what is a key characteristic of how the Mediation Function (MF) handles TCP connections for sending 'LI application' messages to the Law Enforcement Monitoring Facility (LEMF)?
Option 1: The MF receives TCP data and initiates connections only after receiving a request from the LEMF.
Option 2: The MF initiates TCP connections but does not receive TCP data, potentially using multiple connections per LEMF for load balancing.
Option 3: The MF establishes a new TCP connection for each surveillance case, with no more than one connection open at any time.
Option 4: The LEMF always initiates TCP connections to the MF, which can only respond with 'LI application' messages over existing connections.
Explanation: This is correct because, according to the specifications, the Mediation Function (MF) initiates TCP connections to the Law Enforcement Monitoring Facility (LEMF) for sending 'LI application' messages. Additionally, the MF does not receive TCP data and may use multiple connections per LEMF for efficient message distribution.