Question: What is a key principle for the server implementing the bootstrapping function in the Generic Bootstrapping Architecture (GBA), as per 3GPP security standards?
Option 1: It only needs to be trusted by the visited network to handle authentication vectors.
Option 2: It must be trusted by the end-user to handle derived key material exclusively.
Option 3: It is not required to handle any security-related tasks for Network Application Functions (NAFs).
Option 4: It needs to be trusted by the home operator specifically to handle authentication vectors securely.
Explanation: This correct answer reflects a crucial principle of the GBA, emphasizing trust and security. The server implementing the bootstrapping function must be trusted by the home operator, particularly for handling sensitive information like authentication vectors. This ensures the integrity of the bootstrapping process across different networks (home, visited, or third-party) while preventing potential security breaches from affecting multiple NAFs or protocols.