IGMP snooping is a feature that allows switches to monitor the IGMP (Internet Group Management Protocol) messages between hosts and multicast routers, and to learn which ports are interested in receiving which multicast groups.
IGMP snooping can improve the network performance by reducing the unnecessary flooding of multicast traffic to all ports, and by forwarding it only to the ports that have requested it.
IGMP snooping can also conserve bandwidth and CPU resources on the network devices and hosts, as they do not have to process unwanted multicast packets.
IGMP snooping can be especially useful for streaming video applications, as they often use multicast to deliver the same content to multiple devices simultaneously.
The other options are not relevant to addressing the issue of network performance degradation due to streaming video:
Implementing another DHCP server would not help, as DHCP is used to assign IP addresses and other network parameters to hosts, but it does not affect the multicast traffic or the streaming video quality.
Reconfiguring port tagging for the video traffic would not help, as port tagging is used to identify the VLAN membership of frames, but it does not control the multicast traffic or the streaming video quality.
Changing the SSID of the APs would not help, as SSID is used to identify the wireless network name, but it does not affect the multicast traffic or the streaming video quality. Reference:
CompTIA Network+ N10-008 Study Guide, Chapter 3: Network Protocols and Services, Section 3.2: Configure and Support IPv4 and IPv6, p. 179-180 Professor Messer's Network+ N10-008 Course Notes, Section 3.2: IPv4 and IPv6 Multicast, p. 37 Professor Messer's Network+ N10-008 Video Training Course, 3.2 IPv4 and IPv6 Multicast

A honeypot is a decoy system that is intentionally left vulnerable or exposed to attract attackers and divert them from the real targets. A honeypot can also be used to collect information about the attackers' techniques and motives. In the scenario, the SaaS provider has left an unpatched VM available via a public DMZ port, which could be a honeypot technique to lure attackers and monitor their activities. Reference: https://www.comptia.org/blog/what-is-a-honeypot

A denial-of-service (DoS) attack is an example of an attack where an attacker sends more connection requests than a server can handle, causing the server to crash. A DoS attack is a type of cyberattack that aims to disrupt the normal functioning of a network service or resource by overwhelming it with excessive or malformed traffic. A DoS attack can prevent legitimate users from accessing the service or resource, resulting in degraded performance, unavailability, or data loss. A DoS attack can target various network layers, protocols, or components, such as servers, routers, firewalls, or applications. Reference: [CompTIA Network+ Certification Exam Objectives], What Is a Denial-of-Service (DoS) Attack? | Cisco

To allow each device to access its expected network without additional connections, the administrator needs to configure VLANs (virtual LANs) on the switch. VLANs are logical groups of devices that share the same broadcast domain, regardless of their physical location or connection. VLANs can improve network performance, security, and management by isolating traffic and reducing broadcast storms. To configure VLANs on the switch, the administrator needs to assign each device port to a specific VLAN and set the VLAN tagging mode. VLAN tagging is a method of adding a VLAN identifier to the Ethernet frames to indicate which VLAN they belong to. There are two types of VLAN tagging: untagged and tagged. Untagged VLAN tagging means that the switch removes the VLAN identifier from the frames before sending them to the device port. This is suitable for end devices that do not support VLAN tagging, such as PCs, printers, etc. Tagged VLAN tagging means that the switch keeps the VLAN identifier on the frames when sending them to the device port. This is suitable for devices that support VLAN tagging, such as routers, servers, other switches, etc. To allow each device to access the rest of the network, the administrator needs to configure a trunk port on the switch that connects to the uplink. A trunk port is a port that can carry traffic from multiple VLANs using tagged VLAN tagging. This way, the switch can send and receive frames from different VLANs to and from the rest of the network. Therefore, the administrator should do the following to meet the requirements:
Untag an individual VLAN per device port. This will assign each device port to a specific VLAN and remove the VLAN identifier from the frames before sending them to the device port. This will allow each device to access its expected network without additional connections.
Tag the three VLANs across the uplink. This will configure a trunk port on the switch that connects to the uplink and add the VLAN identifier to the frames before sending them to the uplink. This will allow the switch to carry traffic from multiple VLANs to and from the rest of the network.
Reference:
VLANs and Trunks
VLAN Tagging Explained with DTP Protocol
Network + N10-008 practice exam
[CompTIA N10-008 Free Certification Exam Material]
[Free Practice Questions for CompTIA Network+Exam (N10-008)]

Site-to-site VPN provides the best security for connecting a new datacenter to an old one because it creates a secure tunnel between the two locations, protecting data in transit. Reference: CompTIA Network+ Certification Study Guide, Chapter 5: Network Security.