Question: In IKEv2 profile for Network Domain Security (NDS), what is the recommended default hash function for generating signatures using RSA Digital Signature (Method 1) in IKE_INIT_SA and IKE_AUTH exchanges?
Option 1: SHA-256
Option 2: SHA-384
Option 3: SHA-1
Option 4: MD5
Explanation: According to the specified requirements for certificate-based IKEv2 authentication, implementations should use SHA-256 as the default hash function when generating signatures for RSA Digital Signature (Method 1), highlighting its preference over other options due to security considerations, notably the deprecation of SHA-1.