A content filter is the correct solution because it can block access to specific categories of websites, domains, URLs, or application types, including social media. Content filtering is commonly used to enforce acceptable use policies, reduce risk, improve productivity, and prevent users from accessing prohibited or unsafe web content. In this scenario, the requirement is to stop access to social media websites, so filtering web content by category or URL is the most direct control.
The CompTIA Network+ N10-009 objectives include network security concepts, access control, filtering, and security appliances or services. A content filter may be implemented through a secure web gateway, firewall, DNS filtering platform, proxy server, cloud security platform, or endpoint security solution.
Network Access Control, or NAC, controls whether devices are allowed to connect to the network based on identity, posture, or policy. A screened subnet, also called a DMZ, is used to isolate public-facing services. A VPN provides encrypted connectivity but does not inherently block social media access. Therefore, content filtering is the most appropriate answer.

When connecting switches, the uplink ports must be configured to carry traffic for multiple VLANs (trunking), not just a single access VLAN. Without trunking, VLAN tags may be dropped, and traffic from hosts will not reach the rest of the network or internet.

See the solution below in Explanation.
Explanation:
To provide a complete solution for configuring the access layer switches, let's proceed with the following steps:
Identify the correct VLANs for each device and port.
Enable necessary ports and disable unused ports.
Configure fault-tolerant connections between the switches.
Port 1 Configuration (Uplink to Core Switch)
Status: Enabled
LACP: Enabled
Speed: 1000
Duplex: Full
VLAN Configuration: Tagged for VLAN60, VLAN90, VLAN120, VLAN150, VLAN220 Port 2 Configuration (Uplink to Core Switch) Status: Enabled LACP: Enabled Speed: 1000 Duplex: Full VLAN Configuration: Tagged for VLAN60, VLAN90, VLAN120, VLAN150, VLAN220 Port 3 Configuration (Server Connection) Status: Enabled LACP: Disabled Speed: 1000 Duplex: Full VLAN Configuration: Untagged for VLAN90 (Servers) Port 4 Configuration (Server Connection) Status: Enabled LACP: Disabled Speed: 1000 Duplex: Full VLAN Configuration: Untagged for VLAN90 (Servers) Port 5 Configuration (Wired Users and WLAN) Status: Enabled LACP: Enabled Speed: 1000 Duplex: Full VLAN Configuration: Tagged for VLAN60, VLAN120, VLAN150 Port 6 Configuration (Wired Users and WLAN) Status: Enabled LACP: Enabled Speed: 1000 Duplex: Full VLAN Configuration: Tagged for VLAN60, VLAN120, VLAN150 Port 7 Configuration (Voice and Wired Users) Status: Enabled LACP: Enabled Speed: 1000 Duplex: Full VLAN Configuration: Tagged for VLAN60, VLAN90, VLAN120, VLAN220 Port 8 Configuration (Voice, Printers, and Wired Users) Status: Enabled LACP: Enabled Speed: 1000 Duplex: Full VLAN Configuration: Tagged for VLAN60, VLAN90, VLAN120, VLAN220 Port 1 Configuration (Unused) Status: Disabled LACP: Disabled Port 2 Configuration (Unused) Status: Disabled LACP: Disabled Port 3 Configuration (Connection to Device) Status: Enabled LACP: Disabled Speed: 1000 Duplex: Full VLAN Configuration: Untagged for VLAN1 (Default) Port 4 Configuration (Connection to Device) Status: Enabled LACP: Disabled Speed: 1000 Duplex: Full VLAN Configuration: Untagged for VLAN1 (Default) Port 5 Configuration (Connection to Device) Status: Enabled LACP: Disabled Speed: 1000 Duplex: Full VLAN Configuration: Untagged for VLAN1 (Default) Port 6 Configuration (Connection to Device) Status: Enabled LACP: Disabled Speed: 1000 Duplex: Full VLAN Configuration: Untagged for VLAN1 (Default) Port 7 Configuration (Connection to Device) Status: Enabled LACP: Disabled Speed: 1000 Duplex: Full VLAN Configuration: Untagged for VLAN1 (Default) Ports 1 and 2 on Switch 1 are configured as trunk ports with VLAN tagging enabled for all necessary VLANs.
Ports 3 and 4 on Switch 1 are configured for server connections with VLAN 90 untagged.
Ports 5, 6, 7, and 8 on Switch 1 are configured for devices needing access to multiple VLANs.
Unused ports on Switch 3 are disabled.
Ports 3, 4, 5, 6, and 7 on Switch 3 are enabled for default VLAN1.
Core Switch Ports should be configured as needed for uplinks to Switch 1.
Ensure LACP is enabled for redundancy on trunk ports between switches.
By following these configurations, each device will access only its correctly associated network, unused switch ports will be disabled, and fault-tolerant connections will be established between the switches.

The correct choice is B. Using a single public IP. PAT (Port Address Translation) is a form of NAT that allows many internal private IP addresses to share one public IP address by tracking sessions with port numbers. This is one of the most common edge-network designs for homes, small offices, and many enterprise branch environments.
The reason PAT is so useful is that it conserves public IPv4 addresses. Internal hosts keep their private addressing, and when they access external resources, the firewall or router translates those connections so they appear to come from one public address, while still keeping each session unique through port mapping.
The other options are unrelated to PAT's primary purpose. BGP is a routing protocol for route exchange between networks. Redundant ISPs deal with resiliency and multihoming, not port-based address translation.
A dual-stack IP scheme means running IPv4 and IPv6 together, which is separate from the NAT/PAT function.
This question is really asking what situation most naturally calls for PAT. When an organization wants multiple internal devices to reach the internet without assigning each device its own public IPv4 address, PAT is the standard solution. That makes using a single public IP the best answer.