Question: In the context of Self-configuration of network elements for Telecommunication management, what is a security concern associated with acquiring an operator root certificate via Option 2 (during CMPv2 protocol run) that is not present in Option 1 (pre-provisioned in the base station)?
Option 1: Risk of security leak during provisioning within the vendor environment
Option 2: Vulnerability to man-in-the-middle attacks during the brief CMP initialization window
Option 3: Increased risk of base station misconfiguration due to human error
Option 4: Higher likelihood of operator root certificate expiration before deployment
Explanation: Option 2 introduces a security concern not inherent in Option 1: the risk of a man-in-the-middle attack during the brief CMP initialization window, exploitable if an attacker has network access between the base station and the Registration Authority/Certification Authority at initialization time.