One of the best practices for network hardening is to disable unneeded switchports. This prevents unauthorized devices from connecting to the network and reduces the attack surface. Disabling unneeded ports also conserves power and bandwidth. To disable a port on a Cisco switch, the administrator can use the following commands:
switch# configure terminal
switch(config)# interface fastethernet 0/1
switch(config-if)# shutdown
switch(config-if)# end
Disabling SSH service is not a good idea, as SSH provides secure remote access to the switch. Disabling MAC filtering or port security would weaken the security of the switch, as it would allow any device to connect to any port. MAC filtering and port security are techniques that limit the number of MAC addresses or devices that can access a port. Reference: Chapter 18. Network Hardening Techniques - CompTIA Network+ N10-008 Cert Guide, CompTIA Network+ Exam N10-008 - Lesson 19: Applying Network Hardening Techniques, CompTIA Network+ N10-008 | Udemy

Uptime is a statistic that can be used to determine the availability of the remote network equipment. Uptime is the amount of time that a device or system has been running without experiencing any failures or disruptions. It is commonly expressed as a percentage of total time, such as 99.99% uptime. By measuring the uptime of the network equipment at the remote retail locations, the engineer can determine how reliable and available the equipment is.

A redundant cluster of devices is a group of devices that can provide backup or failover functionality in case of a hardware failure or a network attack.
Layer 2 devices operate at the data link layer of the OSI model and are responsible for forwarding frames based on MAC addresses. They include switches, bridges, and NICs.
Multiple routers are not Layer 2 devices, but Layer 3 devices that operate at the network layer of the OSI model and are responsible for forwarding packets based on IP addresses. Therefore, option A is incorrect.
Multiple switches are Layer 2 devices that can provide redundancy and scalability in the network by using protocols such as spanning tree, link aggregation, and VLANs. They can also support Layer 3 functions such as routing and inter-VLAN routing. Therefore, option B is the correct answer.
Multiple firewalls are not Layer 2 devices, but Layer 4 devices that operate at the transport layer of the OSI model and are responsible for filtering traffic based on ports and protocols. They can also provide security services such as NAT, VPN, and IDS. Therefore, option C is incorrect.
Multiple budges is a typo and should be multiple bridges. Bridges are Layer 2 devices that can divide a network into segments and reduce collisions. However, they are less efficient and less intelligent than switches, and they are rarely used in modern networks. Therefore, option D is incorrect.
Reference:
CompTIA Network+ N10-008 Study Guide, Chapter 2: Network Devices, pages 47-48, 51-52, 55-56, 59-60.
Professor Messer's Network+ Video Course, Section 1.1: Network Devices, videos 1.1.1 - 1.1.4, 1.1.6, 1.1.7.
Cisco Press: Fully Redundant Layer 2 and Layer 3 Designs

VLAN hopping is a type of network attack that allows an attacker to access network resources or traffic that belong to a different VLAN than the one the attacker is connected to12.
VLAN hopping can be performed in two ways: switch spoofing or double tagging12.
Switch spoofing is when an attacker configures their device to act as a trunk port and negotiates trunking with the switch, allowing the attacker to access all VLANs on the trunk link12.
Double tagging is when an attacker sends a packet that contains two VLAN tags, one for the attacker's VLAN and one for the target VLAN. The first tag is stripped off by the switch, and the second tag is forwarded to the target VLAN, bypassing the VLAN isolation12.
Double tagging is an example of an attack that utilizes a network packet that contains multiple network tags12.
MAC flooding is a type of network attack that floods the switch's MAC address table with fake or spoofed MAC addresses, causing the switch to enter a fail-open mode and broadcast all traffic to all ports, allowing the attacker to capture or modify the traffic12. MAC flooding does not involve multiple network tags12.
DNS spoofing is a type of network attack that alters the DNS records or responses to redirect the user to a malicious website or server, instead of the legitimate one12. DNS spoofing does not involve multiple network tags12.
ARP poisoning is a type of network attack that sends fake or spoofed ARP messages to associate the attacker's MAC address with the IP address of another device, such as the gateway or the server, allowing the attacker to intercept or modify the traffic between the devices12. ARP poisoning does not involve multiple network tags12. Reference:
1: CompTIA Network+ N10-008 Exam Cram, 6th Edition, Chapter 7: Network Security Concepts and Tools, p. 318-319
2: CompTIA Network+ N10-008 Cert Guide, 1st Edition, Chapter 13: Network Attacks and Mitigation Techniques, p. 615-616

The best command for the administrator to run first on the switch is show vlan, which displays the VLAN configuration information on the switch, such as the VLAN IDs, names, and ports. The show vlan command can help the administrator to verify if the printer is assigned to the correct VLAN, and if there is any mismatch or misconfiguration that prevents the printer from being reachable. The show route command displays the routing table on the switch, which is not relevant for the printer connectivity, as the printer is configured with the correct gateway. The show arp command displays the ARP cache on the switch, which maps the IP addresses to the MAC addresses of the devices. The show arp command can help the administrator to check if the switch has learned the MAC address of the printer, but it is not the best command to run first, as the ARP cache can be cleared or updated frequently. The show config command displays the running configuration on the switch, which includes the VLAN configuration, but it also includes other information that is not related to the printer issue, such as the hostname, the interface settings, the security settings, and so on. The show config command can be overwhelming and time-consuming to analyze, so it is not the best command to run first.
Reference
1: VLANs and Trunking - N10-008 CompTIA Network+ : 2.3
2: N10-008 CompTIA Network+ : 5.5
3: Interface Configurations - N10-008 CompTIA Network+ : 2.3
4: Configuring VLANs - CompTIA Network+ N10-006 - 2.6