Question: In a standalone CA setup for Network Domain Security (NDS), what is the recommendation regarding the use of private keys for signing base station certificates versus signing Certificate Management Protocol (CMP) messages?
Option 1: Use separate private keys for each purpose to enhance security.
Option 2: Always use a single private key for both purposes to simplify management.
Option 3: Alternate between two private keys periodically for added security.
Option 4: The choice depends solely on the operator's root CA preferences.
Explanation: Following best practices in security, using separate private keys for signing base station certificates and CMP messages is recommended to enhance the overall security posture of the network. This approach minimizes the attack surface by not having a single point of failure or compromise across different types of sensitive operations.