A hub-and-spoke design sends all branch and cloud traffic into the central hub (your data center) for inspection, then back out, meeting the requirement for centralized egress and security inspection. By deploying multiple hub nodes and using dynamic path selection, you also achieve redundancy without losing the centralized control plane.

Comprehensive and Detailed Explanation From Exact Extract:
A: Least privilege - This Zero Trust principle ensures users can only access the resources necessary for their job roles. Role-based access control (RBAC), as mentioned in the scenario, is a textbook implementation of least privilege.
C: Microsegmentation - Deploying the application in a small subnet (192.168.77.32/30 provides only 2 usable host IPs) limits lateral movement and isolates the host at a network level. This is a key characteristic of microsegmentation, where resources are placed in small, tightly controlled network segments.
Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide - under "Zero Trust Security Architecture":
"Least privilege enforces access permissions based on job responsibilities."
"Microsegmentation applies granular isolation policies between resources to reduce the attack surface and lateral movement." Other options:
* B. Device trust involves assessing device posture and compliance before granting access.
* D. CASB (Cloud Access Security Broker) governs cloud access, not access control or subnetting.
* E. WAF protects web applications but is not a Zero Trust element directly related to access control.
* F. MFA supports identity verification but is not directly evidenced in the scenario.

Comprehensive and Detailed Explanation From Exact Extract:
Spanning Tree Protocol (STP) is a Layer 2 protocol that prevents loop conditions in redundant switch topologies. It automatically disables redundant links in a controlled way, allowing one active path at a time.
When a switch fails, STP recalculates and activates an alternate path. In this case, loops are detected, but no broadcast storms occurred, indicating that STP is not in place or not configured properly. Implementing STP is a low-cost and effective solution to resolve these issues.
Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide - under "Switching Technologies and Loop Prevention":
"STP prevents switching loops by dynamically identifying and disabling redundant paths. When a link failure occurs, STP re-converges to restore network connectivity."
"STP is an essential protocol in redundant Layer 2 topologies to avoid broadcast and loop issues." Other options:
* A. A Layer 3 switch adds routing functionality but does not prevent Layer 2 loops.
* B. VLANs segment broadcast domains but do not inherently prevent physical loops.
* D. Tagging (e.g., VLAN tagging) helps with segmentation but not with loop prevention.

Comprehensive and Detailed Explanation From Exact Extract:
The WBS (Work Breakdown Structure) is the document that outlines all project tasks, associated timelines, and deliverables. Since the project timeline has significantly deviated from its original estimates, updating the WBS will allow for accurate tracking, reallocation of resources, and setting new expectations. It directly reflects the phase durations and current project status.
Relevant Extract from CompTIA CloudNetX CNX-001 Study Guide - under "Project and Lifecycle Documentation":
"A Work Breakdown Structure provides a detailed timeline and scope of project tasks. Revisions to WBS are essential when milestones or phase durations change significantly." Other options:
* A. BIA (Business Impact Analysis) deals with criticality, not project scheduling.
* B. SLA (Service Level Agreement) defines performance guarantees, not project phases.
* C. SOW (Statement of Work) outlines scope and deliverables but doesn't track current status or time spent.

A /22 gives you 1,022 usable addresses, ample headroom for 200 IT laptops, while a /15 yields 32,766 addresses, covering up to 2,000 sales laptops with room to grow, all within the 10.0.0.0/8 space.