Question: What security mechanisms are required to protect the N2 reference point between the AMF and the 5G-AN?
Option 1: Only DTLS is mandatory for mutual authentication, integrity protection, replay protection, and confidentiality protection.
Option 2: Both IPsec ESP and IKEv2 certificates-based authentication are required, in addition to supporting DTLS for mutual authentication.
Option 3: Either IPsec or DTLS can be used, but not both, to provide security for the N2 interface.
Option 4: No specific security mechanisms are mandated, and it is left to the operator's decision.
Explanation: According to the specifications, IPsec ESP and IKEv2 certificates-based authentication are required to protect the N2 reference point. Additionally, DTLS shall be supported for mutual authentication, integrity protection, replay protection, and confidentiality protection. This ensures a robust security mechanism for the N2 interface between the AMF and the 5G-AN.