The best channel for a new wireless access point is one that does not overlap with the existing channels used by other devices. Overlapping channels can cause interference and degrade the performance of the wireless network. According to the web search results, the 2.4 GHz band has 11 channels in the U.S., but only channels 1, 6, and 11 are non-overlapping. Since the existing devices are using channels 1 and 6, the new device should use channel 11 to avoid adjacent-channel interference12 Reference
1: Why Channels 1, 6 and 11? | MetaGeek 2: How to Choose the Best Wi-Fi Channels for Your Network - Lifewire

The cable type that the technician created is a crossover cable. A crossover cable is a type of twisted-pair cable that has the transmit and receive pairs reversed on one end. A crossover cable is used to connect two devices of the same type, such as two switches or two computers, without using a hub or a switch. A crossover cable can be made by crimping one end of the cable with TIA/EIA-568A standard and the other end with TIA/EIA-568B standard, or vice versa. These standards define the color coding and pin assignments for RJ-45 connectors on twisted-pair cables. References: CompTIA Network+ N10-008 Certification Study Guide, page
53; The Official CompTIA Network+ Student Guide (Exam N10-008), page 2-4.

* The command tracert (or traceroute in some operating systems) is used to trace the route that a packet takes from the source to the destination. It displays the IP addresses and hostnames of the routers and devices along the path, as well as the time it takes for each hop.
* The command can help identify the issue of extreme latency by showing where the delay occurs in the network. For example, if the latency is high between the source and the first router, it may indicate a problem with the local network or the ISP. If the latency is high between two distant routers, it may indicate a problem with the intermediate network or the website's server.
* The command ipconfig is used to display the IP configuration of the local device, such as the IP address, subnet mask, default gateway, and DNS servers. It does not show the route or the latency of the packets to the destination.
* The command netstat is used to display the active connections and listening ports on the local device, as well as the protocol, local address, foreign address, and state of each connection. It does not show the route or the latency of the packets to the destination.
* The command ping is used to test the connectivity and the round-trip time of the packets to the destination. It does not show the route or the latency of each hop along the path. References:
* CompTIA Network+ N10-008 Study Guide, Chapter 3: Network Operations, Section 3.2:
Troubleshooting Methodology and Tools, Page 147-148
* Professor Messer's Network+ N10-008 Course Notes, Page 18
* Professor Messer's Network+ N10-008 Video Training Course, Section 3.2: Network Troubleshooting Tools, Video 3.2.2: Command Line Tools

Explanation
Audit logs are records of the actions performed by users or processes on a system or network device. They can provide information about who made what changes, when, and why. Audit logs are essential for detecting and investigating security incidents, as well as for ensuring compliance with policies and regulations. Audit logs can help the network security engineer to identify the source of the unauthorized configuration changes to the boundary firewall, as well as the scope and impact of the changes.
References1 - Changes to Cyber Essentials requirements - April 2021 update2 - 8 Firewall Best Practices for Securing the Network3 - How to secure your network boundaries with a firewall