Port mirroring, also known as SPAN (Switched Port Analyzer), is used to send a copy of network packets seen on one switch port (or an entire VLAN) to another port where the IDS is connected. This allows the IDS to passively inspect network traffic without interfering with the actual traffic flow. Port mirroring is an essential feature for implementing IDS in a network for traffic analysis and security monitoring.References:
CompTIA Network+ study materials.

To increase overall security after a recent breach, implementing least privilege network access and central policy management are effective strategies.
* Least Privilege Network Access: This principle ensures that users and devices are granted only the access necessary to perform their functions, minimizing the potential for unauthorized access or breaches. By limiting permissions, the risk of an attacker gaining access to critical parts of the network is reduced.
* Central Policy Management: Centralized management of security policies allows for consistent and streamlined implementation of security measures across the entire network. This helps in quickly responding to security incidents, ensuring compliance with security protocols, and reducing the chances of misconfigurations.
Network References:
* CompTIA Network+ N10-007 Official Certification Guide: Discusses network security principles, including least privilege and policy management.
* Cisco Networking Academy: Provides training on implementing security policies and access controls.
* Network+ Certification All-in-One Exam Guide: Covers strategies for enhancing network security and managing policies effectively.

The three-tier hierarchical model in network design consists of three layers: access, distribution, and core. The access layer is where devices like PCs and printers connect to the network. The distribution layer aggregates the data received from the access layer switches before it is transmitted to the core layer, which is responsible for high-speed data transfer and routing. This approach improves scalability and performance in larger networks. References: CompTIA Network+ Exam Objectives and official study guides.

Infrastructure as a Service (IaaS) provides scalable compute power, storage, and networking resources on demand. It is the best choice for a company that needs to customize its cloud solution based on size, compute capacity, and storage needs.
IaaS Benefits:
Provides virtual machines, storage, and networking resources.
Scalable based on company needs.
Reduces the need for physical infrastructure.
Incorrect Options:
A:SaaS (Software as a Service): Delivers software applications (e.g., Google Docs, Microsoft 365) but does not provide compute/storage infrastructure.
B:PaaS (Platform as a Service): Provides a development environment for application deployment but not full infrastructure control.
D:IaC (Infrastructure as Code): A methodology for automating infrastructure, not a cloud deployment model.