Other tools are less relevant here:
A). tcpdump is a packet analyzer and is more advanced for deeper traffic analysis.
B). tracert is used to trace the route to a destination, not ideal for DNS issues.
C). nmap is a port scanner and network mapper, not for resolving DNS problems.
D). dig (Domain Information Groper) is a DNS lookup tool used to troubleshoot DNS problems by querying name servers directly.
Reference:
CompTIA Network+ N10-009 Official Objectives: 5.1 - Given a scenario, use the appropriate network troubleshooting tools.
Explanation:
The issue is clearly related to DNS resolution, as IP-based connections succeed but domain name-based ones fail.

Shoulder surfing is a social engineering attack where attackers observe someone's private information by looking over their shoulder or using tools like cameras to capture input.
From Andrew Ramdayal's guide:
"Shoulder surfing is the act of watching someone enter confidential information, such as PINs or passwords, often using direct line-of-sight or surveillance equipment."

An Extended Service Set Identifier (ESSID) allows multiple access points to share the same SSID, enabling seamless roaming for users. This means that users can move between different access points within the same ESSID without losing connection or having to reauthenticate. This provides a better user experience, especially in large environments such as office buildings or campuses.Reference: CompTIA Network+ study materials.

When the hosts file is altered, local name resolution is compromised, and domain queries are redirected to malicious IP addresses. This is a form of DNS spoofing/poisoning, where false mappings trick users into visiting fraudulent websites.
B . Phishing typically uses emails or messages to trick users, not local file modification.
C . VLAN hopping is a Layer 2 attack to gain unauthorized network access, unrelated to DNS.
D . ARP poisoning manipulates ARP tables on a LAN to reroute traffic, not name resolution.
Reference (CompTIA Network+ N10-009):

It is common for an access port to have both a voice VLAN and a data VLAN. A voice VLAN separates voice traffic from regular data traffic, ensuring better quality and security for voice communications.