tcpdump is a command-line tool that can capture and analyze network traffic on a given interface. tcpdump can verify the status of NAT by showing the source and destination IP addresses of the packets before and after they pass through the ISP router that translates traffic destined for the internet. tcpdump can also show the NAT protocol and port numbers used by the router. nmap, ipconfig, and tracert are not suitable tools for verifying the status of NAT, as they do not show the IP address translation process.
Reference
1: Network Address Translation - N10-008 CompTIA Network+ : 1.4
2: CompTIA Network+ N10-008 Certification Study Guide, page 95-96
3: CompTIA Network+ N10-008 Exam Subnetting Quiz, question 16
4: CompTIA Network+ N10-008 Certification Practice Test, question 7

DHCP scope exhaustion occurs when there are no more available IP addresses in the DHCP pool to assign to new clients12.
This can cause network connectivity issues for clients that rely on DHCP to obtain an IP address dynamically12.
The symptoms of DHCP scope exhaustion include:
Clients receiving APIPA addresses (169.254.x.x) or no IP address at all12.
Clients losing network connectivity after their lease expires and cannot renew it12.
Clients experiencing intermittent network connectivity when they disconnect and reconnect, as they may get an IP address from a different DHCP server or a released address from the same DHCP server12.
The solution for DHCP scope exhaustion is to either increase the size of the DHCP pool, split the network into smaller subnets with their own DHCP scopes, or implement a DHCP relay agent to forward DHCP requests to another DHCP server with more available addresses12.
Incorrect firewall settings, inappropriate VLAN assignment, hardware failure, and overloaded CAM table in switch are not likely causes of the network connectivity issues described in the question, as they would affect all clients or specific segments of the network, not randomly selected users12. Reference:
1: CompTIA Network+ N10-008 Exam Cram, 6th Edition, Chapter 3: IP Addressing and Subnetting, p. 98-99
2: CompTIA Network+ N10-008 Cert Guide, 1st Edition, Chapter 4: IP Addressing, p. 156-157

The default credentials are the username and password that come with a device or service when it is first installed or configured. They are often easy to guess or find online, which makes them vulnerable to unauthorized access or attacks. The default credentials should be changed to something unique and strong as soon as possible to avoid this situation. If the default credentials were not changed, someone could have accessed the SOHO router and changed the WiFi settings without the employees' knowledge. Reference: https://www.comptia.org/blog/network-security-basics-6-easy-ways-to-protect-your-network

A colocation service is a service that provides rack space, power, cooling, security, and connectivity for a company's network equipment in a data center. A colocation service can be used when a company does not have sufficient rack space in its own data center and does not want to invest in building or expanding its own facilities. By using a colocation service, a company can host its new equipment in a professional and reliable environment without a major investment in facilities. Reference: https://www.comptia.org/training/books/network-n10-008-study-guide (page 414)

"WPA uses Temporal Key Integrity Protocol (TKIP) for enhanced encryption. TKIP uses RC4 for the encryption algorithm, and the CompTIA Network+ exam may reference TKIP-RC4 in a discussion of wireless."
" WPA2 uses Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP) for integrity checking and Advanced Encryption Standard (AES) for encryption. On the Network+ exam, you might find this referenced as simply CCMP-AES"