Question: When adopting KMS-based IMS media security in a network, what is the recommended protection mechanism for the HI2 interface to ensure strong integrity and confidentiality?
Option 1: IPsec (Internet Protocol Security) with pre-shared keys
Option 2: TLS (Transport Layer Security) with certificate profiling as per Network Domain Security (NDS) guidelines
Option 3: Application-layer encryption using proprietary algorithms
Option 4: No additional security measures beyond basic authentication
Explanation: To maintain strong integrity and confidentiality for the HI2 interface when KMS-based IMS media security is in use, utilizing TLS with properly managed certificate profiling (as outlined in Network Domain Security standards) provides a robust and standardized security approach. This aligns with best practices for securing sensitive communication interfaces within telecom networks.