On a WLC, which configuration prevents spoofed association requests and forces a 10 ms retry delay?

Protected Management Frames (PMF) enhance Wi-Fi security by protecting management frames from spoofing and tampering. When PMF is enabled, it requires devices to establish a secure association before exchanging management frames. The "Comeback timer" specifies how long a client must wait before retrying an association request if the initial attempt fails or is rejected. Setting this to 10 ms helps prevent denial-of-service attacks by slowing down rapid, spoofed association attempts. MAC filtering is a basic access control mechanism but doesn't prevent spoofed association requests themselves. 802.1X Layer 2 security is for authentication, not specifically for protecting management frames from spoofing. Security Association Teardown Protection is a component of PMF but doesn't directly configure the retry delay.