Quality of Service (QoS)is the best cost-effective solution. It prioritizes traffic based on application criticality. If the bandwidth is limited and only a few users are affected, prioritizing that application traffic can improve performance without needing costly bandwidth upgrades or direct connections.
Reference:

A golden configuration is a baseline configuration file that contains approved, standardized settings for network devices. The purpose is to ensure configuration consistency across the environment. This prevents misconfigurations, supports compliance with organizational or regulatory standards, and accelerates recovery if a device needs reconfiguration.
B . Reducing file size is not the goal of golden configs.
C . Golden configs can include security settings, but they are not inherently encrypted - they are simply a baseline template.
D . While configs can be backed up, golden configs are more about standardization, not device-specific backups.
By maintaining a golden configuration, administrators can quickly detect unauthorized changes (by comparing running configs against the golden file) and enforce consistency across devices. This improves network stability, reduces troubleshooting complexity, and enhances security posture.

IPsec (Internet Protocol Security) is the most secure way to provide site-to-site connectivity. It provides robust security services, such as data integrity, authentication, and encryption, ensuringthat data sent across the network is protected from interception and tampering. Unlike other options, IPsec operates at the network layer and can secure all traffic that crosses the IP network, making it the most comprehensive and secure choice for site-to-site VPNs.Reference: CompTIA Network+ study materials and NIST Special Publication 800-77.

When traffic moves laterally between VMs within the same network or subnet, it is known as east-west traffic. This contrasts with north-south traffic, which refers to communication between internal and external networks.
Breakdown of Options:
A). East-west - Correct answer. This refers to traffic between internal servers or VMs, which is a common security concern.
B). Point-to-point - Point-to-point describes a direct connection between two devices, but does not specifically define lateral movement.
C). Horizontal-scaling - This refers to adding more instances or nodes in cloud computing, unrelated to traffic flow.
D). Hub-and-spoke - This network topology describes a centralized design, not lateral traffic.
Reference:
CompTIA Network+ (N10-009) Official Study Guide - Domain 1.4: Analyze traffic patterns and behavior.
NIST SP 800-207: Zero Trust Architecture (ZTA) - East-West traffic monitoring

EIGRP (Enhanced Interior Gateway Routing Protocol) has a default administrative distance (AD) value of 90 for internal routes. The administrative distance is used to rate the trustworthiness of routing information received from different routing protocols. EIGRP, developed by Cisco, has an AD of 90, which is lower than that of RIP (120) and OSPF (110), making it more preferred if multiple protocols provide a route to the same destination.Reference: CompTIA Network+ study materials.