IPsec (Internet Protocol Security) is the most secure way to provide site-to-site connectivity. It provides robust security services, such as data integrity, authentication, and encryption, ensuring that data sent across the network is protected from interception and tampering. Unlike other options, IPsec operates at the network layer and can secure all traffic that crosses the IP network, making it the most comprehensive and secure choice for site-to-site VPNs.References: CompTIA Network+ study materials and NIST Special Publication
800-77.

Switches in sealed enclosures are at risk of overheating because airflow is restricted. The temperature factor is critical since heat buildup can damage components, shorten device lifespan, and cause outages. Proper cooling or ventilation must be ensured.
A). Fire suppression is important for data centers but not the primary concern in a sealed box.
B). Power budget applies to PoE allocations, not environmental safety.
D). Humidity matters, but overheating is far more immediate in sealed environments.
References (CompTIA Network+ N10-009):
Domain: Network Infrastructure - Environmental considerations, switch installation, temperature control.

The option that most directly secures sensitive information on the network is data-in-transit encryption. This ensures that data packets are unreadable to attackers who intercept them while moving across the network.
Protocols such as TLS, HTTPS, IPsec, and SSH protect confidentiality and integrity of sensitive information.
B). Principle of least privilege (PoLP) secures access control but does not directly protect data in motion.
C). Role-based access control (RBAC) enforces permissions but again does not secure the data while transmitted.
D). Multifactor authentication (MFA) strengthens identity verification but does not directly protect the data itself once transmitted.
Thus, while all options contribute to overall security, encryption of data-in-transit most directly addresses protection of sensitive information on the network.
References (CompTIA Network+ N10-009):
Domain: Network Security - Encryption methods, confidentiality, data-in-transit protection.

When a switch is improperly connected to a network, it can cause widespread connectivity issues, especially if there's a misconfiguration in VLAN settings. A Native VLAN mismatch occurs when two switches connected via a trunk link have different native VLANs configured for untagged traffic. This can cause traffic to be sent to the wrong VLAN or dropped, resulting in connectivity loss for users.
Scenario Analysis: The intern likely connected the switch without ensuring that the trunk port's native VLAN matched the existing network configuration. This is a common issue in Cisco-based networks when trunk links are misconfigured.
Why not VTP update? VLAN Trunking Protocol (VTP) updates propagate VLAN configurations across switches. While a VTP misconfiguration could cause issues, it's less likely to immediately disrupt connectivity for many users unless the VTP server deleted critical VLANs, which is not implied here.
Why not Port security issue? Port security restricts access based on MAC addresses, typically affecting individual ports, not causing widespread outages.
Why not LLDP misconfiguration? Link Layer Discovery Protocol (LLDP) is used for device discovery, and misconfiguration is unlikely to cause a broad loss of connectivity.
Reference:CompTIA Network+ N10-009 Objective 2.2: Explain the purpose of network segmentation and VLAN configuration. The CompTIA Network+ Study Guide (e.g., Chapter 6: Switching) discusses VLAN trunking and the importance of matching native VLANs on trunk links to prevent connectivity issues. Native VLAN mismatches are highlighted as a common cause of network disruptions.

This is a classic example of social engineering, where an attacker manipulates individuals into giving up confidential information, such as credentials, by pretending to be someone trustworthy (like help desk staff).
B). Tailgating involves physical access without authentication.
C). Shoulder surfing is spying over someone's shoulder to steal info.
D). Smishing is phishing via SMS.
E). Evil twin involves a rogue Wi-Fi access point impersonating a legitimate one.
# Reference:
CompTIA Network+ N10-009 Official Objectives: 4.2 - Identify common security threats and vulnerabilities.