Question: In SNPN using CH with AAA server, how is identity privacy achieved during NSWO authentication?
Option 1: Through the construction of SUCI.
Option 2: Via EAP method specific means at the EAP layer.
Option 3: By involving NSWOF/AUSF/UDM in the EAP authentication process.
Option 4: Using a different key generating EAP method than the one used by SNPN over 3GPP access.
Explanation: According to the text, for NSWO support in SNPN using CH with AAA server, identity privacy is achieved at the EAP layer via EAP method specific means. This implies that the EAP method itself provides the necessary privacy mechanisms, making option 2 the correct answer.