An API (Application Programming Interface) is the best choice when a development team needs to integrate a device's reporting data directly into custom software. In Network+ (N10-009) objectives, network operations commonly include device management, monitoring, and automation, and APIs are a key method for programmatic access to operational data (often via REST/HTTPS with structured formats like JSON). This enables the internal support application to pull dashboards, health metrics, events, configuration details, and reporting outputs in a controlled, developer-friendly way.
SNMPv2c is primarily used for network monitoring and polling counters/alerts, but it is less secure (community strings) and is not as flexible for modern application integration as an API. A MIB is not a data- access "feature" by itself; it's the schema/definitions SNMP uses to describe managed objects. A SIEM is a separate security analytics platform that collects and correlates logs/events-useful for security operations, but not the direct interface a custom support tool would typically call to retrieve device reporting data.

A captive portal is designed to present terms, conditions, or usage rules to users and require them to acknowledge/accept those rules before granting network or internet access. In Network+ (N10-009) security and access control concepts, captive portals are commonly associated with guest wireless or public access scenarios, where users are redirected to a web page that displays acceptable-use language and requires a click- through acceptance (and sometimes authentication). This provides a technical enforcement point: users must actively accept the rules to proceed, which supports organizational policy compliance and creates a recordable control in many implementations.
An Acceptable Use Policy (AUP) is the document that defines the rules, but by itself it does not technically force a user to acknowledge them at the time of access. NAC controls who/what can connect and can enforce posture and segmentation, but it does not inherently ensure users "accept" usage rules unless paired with a portal workflow. DNS filtering blocks or allows domain access categories (malware, adult content, etc.), which enforces browsing restrictions but does not guarantee user acceptance of rules. Therefore, the best answer to ensure users accept the rules is captive portal.

VLAN hopping occurs when an attacker tricks a switch into believing the host is another switch by generating tagged frames or exploiting trunk negotiation (DTP). This allows the attacker to access traffic from multiple VLANs, potentially stealing sensitive data.
B). Evil twin is a rogue wireless AP attack, unrelated to switch impersonation.
C). DNS poisoning corrupts name resolution, not VLAN access.
D). ARP spoofing is a Layer 2 on-path attack, not masquerading as a switch.
References (CompTIA Network+ N10-009):
Domain: Network Security - VLAN hopping attacks, switch spoofing techniques.

*Too much overlap on the same channel (all devices on channel 11) causes interference, leading to retransmissions and high latency.
*Same SSIDs (A) are expected in mesh networks.
*Device compatibility (C) would show different symptoms.
*Node power (D) affects coverage, not congestion.
# Reference: CompTIA Network+ N10-009 Official Documentation - Wireless Troubleshooting & Signal Interference.

A content filter is the correct solution because it can block access to specific categories of websites, domains, URLs, or application types, including social media. Content filtering is commonly used to enforce acceptable use policies, reduce risk, improve productivity, and prevent users from accessing prohibited or unsafe web content. In this scenario, the requirement is to stop access to social media websites, so filtering web content by category or URL is the most direct control.
The CompTIA Network+ N10-009 objectives include network security concepts, access control, filtering, and security appliances or services. A content filter may be implemented through a secure web gateway, firewall, DNS filtering platform, proxy server, cloud security platform, or endpoint security solution.
Network Access Control, or NAC, controls whether devices are allowed to connect to the network based on identity, posture, or policy. A screened subnet, also called a DMZ, is used to isolate public-facing services. A VPN provides encrypted connectivity but does not inherently block social media access. Therefore, content filtering is the most appropriate answer.