Question: What happens to the current AS keys KRRCenc, KUPenc (if available), and KUPint (if available) at the gNB/ng-eNB after sending the RRCRelease with suspendConfig message to the UE?
Option 1: The gNB/ng-eNB keeps all the current AS keys.
Option 2: The gNB/ng-eNB deletes KRRCenc, KUPenc (if available), and KUPint (if available) but keeps KRRCint.
Option 3: The gNB/ng-eNB updates KRRCenc, KUPenc (if available), and KUPint (if available) with new values.
Option 4: The gNB/ng-eNB does not take any action on the current AS keys.
Explanation: According to the security procedures for state transition from RRC_CONNECTED to RRC_INACTIVE, after sending the RRCRelease with suspendConfig message to the UE, the gNB/ng-eNB deletes the current AS keys KRRCenc, KUPenc (if available), and KUPint (if available) but keeps the current AS key KRRCint.