Question: In IMS networks utilizing TLS for transport protection between network elements, what is the preferred approach for cipher suite selection during TLS negotiation?
Option 1: Prefer RSA-based cipher suites, followed by elliptic curve cryptography (ECC) suites
Option 2: Prioritize static Diffie-Hellman cipher suites over AES cipher suites
Option 3: Firstly prefer AES cipher suites, and secondly prefer ephemeral Diffie-Hellman cipher suites
Option 4: Select cipher suites randomly to enhance security through unpredictability
Explanation: This approach balances security and performance. AES cipher suites are preferred first for strong symmetric encryption, providing excellent confidentiality and integrity. Ephemeral Diffie-Hellman is preferred second, enhancing key exchange security with forward secrecy, protecting past sessions from future compromises, thus maximizing both security and efficiency of TLS connections in IMS networks.