The antenna type affects the signal strength and coverage of a WAP. Different types of antennas have different radiation patterns and gain, which determine how far and wide the signal can reach. If the user experiences a weak signal in one direction but a strong signal in the opposite direction, it could mean that the antenna type is not suitable for the desired coverage area. The technician should consider changing the antenna type to one that has a more balanced or directional radiation pattern. Reference: https://community.cisco.com/t5/wireless-small-business/wap200-poor-signal-strength/td-p/1565796

The question asks about the metrics that will most accurately show the underlying performance issues of slow or unresponsive desktops for users who are using VMs (virtual machines).
VMs are software-based simulations of physical computers that run on a host system. They share the resources of the host system, such as CPU, memory, disk space, etc.
If the host system does not have enough resources to support the number of VMs running on it, the performance of the VMs will suffer. This is especially true if the VMs are running resource-intensive applications or tasks.
Therefore, the metrics that will most accurately show the underlying performance issues are CPU usage and memory. These metrics indicate how much of the host system's resources are being consumed by the VMs and how much is available for other processes.
The other metrics are not relevant to the question, as they are related to the network performance, not the host system performance. They are:
Temperature: the measure of how hot the host system or its components are. High temperature can cause overheating and damage to the hardware, but it is not directly related to the performance of the VMs.
Bandwidth: the measure of how much data can be transferred over a network connection in a given time. Low bandwidth can cause network congestion and slow data transfer, but it is not directly related to the performance of the VMs.
Latency: the measure of how long it takes for a data packet to travel from one point to another on a network. High latency can cause delays and poor quality of service, but it is not directly related to the performance of the VMs.
Jitter: the measure of how much the latency varies over time on a network. High jitter can cause inconsistent and unpredictable network performance, but it is not directly related to the performance of the VMs.
Reference:
CompTIA Network+ N10-008 Study Guide, Chapter 1: Networking Concepts, Section 1.3: Virtualization and Network Storage Technologies, Pages 34-36 Professor Messer's CompTIA N10-008 Network+ Course, Video 1.3: Virtualization and Network Storage Technologies, Part 1 Network + N10-008 practice exam, Question 8, Answer A and B, Explanation

Zero Trust is a security framework that requires all users, whether in or outside the organization's network, to be authenticated, authorized, and continuously validated for security configuration and posture before being granted or keeping access to applications and data. Zero Trust prevents attackers from moving laterally through a system by applying granular policies and controls based on the principle of least privilege and by segmenting and encrypting data flows across the network. Reference: https://partners.comptia.org/docs/default-source/resources/comptia-network-n10-008-exam-objectives-(2-0), https://www.crowdstrike.com/cybersecurity-101/zero-trust-security/

VLAN hopping is a type of network attack that allows an attacker to access network resources or traffic that belong to a different VLAN than the one the attacker is connected to12.
VLAN hopping can be performed in two ways: switch spoofing or double tagging12.
Switch spoofing is when an attacker configures their device to act as a trunk port and negotiates trunking with the switch, allowing the attacker to access all VLANs on the trunk link12.
Double tagging is when an attacker sends a packet that contains two VLAN tags, one for the attacker's VLAN and one for the target VLAN. The first tag is stripped off by the switch, and the second tag is forwarded to the target VLAN, bypassing the VLAN isolation12.
Double tagging is an example of an attack that utilizes a network packet that contains multiple network tags12.
MAC flooding is a type of network attack that floods the switch's MAC address table with fake or spoofed MAC addresses, causing the switch to enter a fail-open mode and broadcast all traffic to all ports, allowing the attacker to capture or modify the traffic12. MAC flooding does not involve multiple network tags12.
DNS spoofing is a type of network attack that alters the DNS records or responses to redirect the user to a malicious website or server, instead of the legitimate one12. DNS spoofing does not involve multiple network tags12.
ARP poisoning is a type of network attack that sends fake or spoofed ARP messages to associate the attacker's MAC address with the IP address of another device, such as the gateway or the server, allowing the attacker to intercept or modify the traffic between the devices12. ARP poisoning does not involve multiple network tags12. Reference:
1: CompTIA Network+ N10-008 Exam Cram, 6th Edition, Chapter 7: Network Security Concepts and Tools, p. 318-319
2: CompTIA Network+ N10-008 Cert Guide, 1st Edition, Chapter 13: Network Attacks and Mitigation Techniques, p. 615-616

Disabling unneeded switchports is a security best practice that prevents unauthorized devices from connecting to the network and potentially compromising its integrity or confidentiality.
By disabling the switchports that are not in use, the network manager reduces the attack surface and the risk of rogue devices, such as laptops, printers, or cameras, from accessing the network.
Disabling unneeded switchports can also prevent MAC flooding attacks, which occur when an attacker sends a large number of spoofed MAC addresses to a switch, causing it to overflow its MAC address table and forward all traffic to all ports, effectively turning the switch into a hub.
To disable a switchport, the network manager can use the command switchport mode shutdown on the interface configuration mode of the switch.
Changing the default VLAN, configuring DHCP snooping, and writing ACLs are also security measures that can be applied to switches, but they are not the most likely ones in this scenario.
Changing the default VLAN can prevent VLAN hopping attacks, which occur when an attacker sends frames with double 802.1Q tags to a switch, causing it to forward the frames to another VLAN.
Configuring DHCP snooping can prevent DHCP spoofing attacks, which occur when an attacker sets up a rogue DHCP server on the network and offers fake IP addresses and gateway information to unsuspecting clients, redirecting their traffic to the attacker's device.
Writing ACLs can prevent unauthorized access to the switch or the network resources, by filtering traffic based on source and destination IP addresses, ports, protocols, or other criteria. Reference:
Network + N10-008 practice exam Flashcards | Quizlet
Network+ N10-008 Practice Test | CertBlaster | Free CompTIA Network+ Practice Test