Question 1

What is the fundamental difference between Digital Beamforming, Analog Beamforming, and Hybrid Beamforming?

Accepted Answer

Analog beamforming applies RF phase shifters after digital-to-analog conversion, steering a single broad beam per RF chain. Digital beamforming applies precoding matrices in the digital baseband per subcarrier across every antenna element. Hybrid beamforming combines both architectures to achieve massive MIMO multiplexing at sustainable hardware power and cost. In massive MIMO (64T64R to 256T), deploying a dedicated RF transceiver (DAC/ADC, power amplifier, mixer, filter) for each individual patch element would result in prohibitive power consumption and thermal dissipation, especially at FR2 millimeter-wave frequencies. Hybrid beamforming partitions the signal processing: the baseband performs digital precoding for spatial multiplexing across N_RF chains, and an analog RF phase-shifting network maps these chains across a much larger array of N_ant antenna elements for high-gain pencil beams.

Question 2

How does 5G Service-Based Architecture (SBA) differ from legacy point-to-point 4G EPC?

Accepted Answer

4G EPC used distinct hardware-bound nodes communicating over proprietary binary protocols like Diameter (over SCTP) and GTP-C. 5G SBA replaces this with a microservices mesh where stateless Network Functions (NFs) communicate via HTTP/2 and JSON REST APIs. Under 5G SBA, every control-plane Network Function (AMF, SMF, PCF, UDM, AUSF, NEF) acts as an HTTP/2 Service Producer and Service Consumer. NFs register their profile, supported services, and IP endpoints with the Network Repository Function (NRF). When an SMF needs to authenticate a subscriber session, it discovers the UDM through NRF queries and invokes JSON REST calls. This cloud-native model allows independent container scaling, blue-green software upgrades, and multi-cloud deployment.

Question 3

Explain 5G NSA Option 3x vs 5G SA Option 2 and how dual connectivity works.

Accepted Answer

Option 3x is a Non-Standalone architecture where the 4G eNodeB is the Master Node (MN) connected to the 4G EPC for control signaling, while the 5G gNodeB acts as the Secondary Node (SN) with the user plane split directly at the gNodeB. Option 2 is pure Standalone, connecting the gNodeB directly to the 5G Core. In Multi-Radio Dual Connectivity (MR-DC) Option 3x, the UE establishes an RRC connection with the LTE eNB (anchored on S1-MME). However, the downlink user plane from the EPC S-GW connects directly to the 5G gNodeB (S1-U termination). The gNB can dynamically route data directly to the UE over 5G NR, or forward packets across the X2 interface to the LTE eNB for carrier aggregation. Option 2 eliminates legacy LTE dependencies entirely: the gNodeB connects to the AMF over N2 and the UPF over N3.

Question 4

Describe the end-to-end procedure for 5G PDU Session Establishment.

Accepted Answer

The UE requests a PDU session via NAS signaling through the AMF. The AMF selects an SMF via the NRF. The SMF queries the UDM/PCF for policy and user profile, selects a UPF, and programs packet forwarding rules over the N4 interface using PFCP. 1. The UE sends a NAS PDU Session Establishment Request to the AMF over the N1 interface containing the PDU Session ID, requested S-NSSAI, and DNN.
2. The AMF selects an appropriate SMF based on S-NSSAI/DNN.
3. The SMF validates the subscription with the UDM and fetches QoS policy from the PCF (N7 interface).
4. The SMF selects a UPF and initiates N4 Session Establishment using PFCP, provisioning Packet Detection Rules (PDR), Forwarding Action Rules (FAR), and QoS Enforcement Rules (QER).
5. The SMF responds to the AMF with N2 SM information (including UPF tunnel endpoint GTP-TEID and QoS profile).
6. The AMF forwards N2 signaling to the gNodeB, which sets up Data Radio Bearers (DRBs) with the UE via RRCReconfiguration.
7. The gNodeB confirms N2 setup back to the AMF/SMF, completing the bidirectional user-plane tunnel.

Question 5

How does 5G protect subscriber identity over the air interface compared to 4G IMSI catchers?

Accepted Answer

4G transmitted the subscriber IMSI in cleartext during initial attach, exposing users to IMSI catchers (Stingrays). 5G introduces the Subscription Concealed Identifier (SUCI), encrypting the permanent SUPI using the operator public key stored on the USIM. In 5G, the permanent subscriber identifier is the Subscription Permanent Identifier (SUPI). During initial registration, the UE generates an ephemeral Elliptic Curve Integrated Encryption Scheme (ECIES) key pair and encrypts the SUPI into a Subscription Concealed Identifier (SUCI). Even an adversary capturing the over-the-air radio transmission sees only a pseudorandom ciphertext. Only the home network’s Subscription Identifier De-concealing Function (SIDF), collocated with the UDM, holds the private key required to decrypt the SUCI back to the SUPI.

Question 6

What is O-RAN Split 7.2x and why is it preferred over other functional splits?

Accepted Answer

Split 7.2x divides the physical layer (PHY) between the O-DU (Distributed Unit) and O-RU (Radio Unit). The O-DU handles High-PHY (coding, scrambling, modulation, MIMO precoding), while the O-RU handles Low-PHY (FFT/IFFT, CP insertion, digital beamforming). Lower splits (like Split 8) stream raw RF time-domain I/Q samples, creating astronomically high fronthaul bandwidth requirements (often exceeding 100 Gbps per antenna array). Higher splits (like Split 2) push all PHY processing into the radio unit, dramatically increasing RU cost, size, and power consumption. Split 7.2x balances bandwidth efficiency with cost: by performing resource element demapping and MIMO processing in the centralized O-DU, the fronthaul data stream is compressed, and interoperability between different vendor RUs and DUs is achieved over standard eCPRI.

Question 7

What is 5G RedCap (Reduced Capability) and how does it differ from NB-IoT and Cat-M1?

Accepted Answer

NB-IoT and Cat-M1 are LPWAN technologies restricted to sub-1 Mbps speeds. RedCap fills the mid-tier performance segment (30 to 150 Mbps), reducing 5G device cost and power while supporting low latency, network slicing, and 5G native security. RedCap achieves dramatic hardware simplification by: reducing device bandwidth from 100 MHz down to 20 MHz in FR1; decreasing receiver antennas from 4 down to 1 or 2 (reducing RF components by 50%); eliminating support for complex 256-QAM in favor of 64-QAM; and allowing half-duplex operation in FDD bands. This enables compact form factors and multi-year battery life for wearable devices, smart sensors, and surveillance cameras without falling back to legacy 4G networks.

Question 8

What is the SDAP (Service Data Adaptation Protocol) layer and why was it introduced in 5G?

Accepted Answer

SDAP is a new layer in the 5G NR user-plane protocol stack above PDCP. Its primary responsibility is mapping 5G Core QoS Flows to Radio Access Network Data Radio Bearers (DRBs) and marking QoS Flow Identifiers (QFIs). In 4G LTE, QoS was mapped at the bearer level (EPS Bearer). 5G Core introduced a finer-grained QoS model where each PDU session can contain multiple QoS Flows characterized by a 5G QoS Identifier (5QI). The SDAP layer provides bidirectional mapping: in downlink, it inspects the QFI tag received from the UPF and maps the packet into the appropriate Data Radio Bearer (DRB) configured on the gNodeB. In uplink, it can perform reflective QoS mapping, applying the same QFI-to-DRB mapping learned from downlink traffic.

Question 9

How is a Network Slice identified and selected in 5G end-to-end?

Accepted Answer

A network slice is identified by an S-NSSAI (Single Network Slice Selection Assistance Information), consisting of an 8-bit Slice/Service Type (SST) and an optional 24-bit Slice Differentiator (SD). The UE provides its Requested NSSAI (a list of up to 8 S-NSSAIs) during RRC setup and Registration Request. The AMF queries the Network Slice Selection Function (NSSF) with the requested slice, user subscription from UDM, and local operator policies. The NSSF determines the Allowed NSSAI and selects the appropriate AMF or Network Slice Instances. Standard SST values defined by 3GPP are: SST 1 = eMBB, SST 2 = URLLC, SST 3 = MIoT, SST 4 = V2X, SST 5 = High-Performance Machine Comms.

Question 10

What are the main technical challenges when standardizing 5G satellite communications in 3GPP Rel-17/18?

Accepted Answer

The two primary physical layer challenges in 5G NR-NTN are massive propagation delays (up to 25.7 ms for LEO, 270 ms for GEO) and extreme Doppler frequency shifts (up to ±48 kHz in LEO at S-band). Because LEO satellites orbit Earth at roughly 7.5 km/s, the carrier frequency experiences rapid Doppler variation. 5G NTN overcomes this via pre-compensation: the UE uses satellite ephemeris data (orbital trajectory broadcasted in SIB19) and GNSS positioning to calculate and pre-shift its uplink transmit frequency and timing. Additionally, the random access channel (PRACH) uses extended timing advance offsets, and the HARQ feedback mechanism allows disabling stop-and-wait retransmissions to prevent stalling over long satellite round trips.

Reinforce Interview Concepts with 700 Flashcards

Top 5G Telecom Engineer Interview Questions & Answers

Architectural Interview Q&A

Want to drill more technical 5G questions?

Explore Related 5G & 6G Modules