Yeah, I'm going with B here. 802.11r is meant for fast roaming and 802.11w covers management frame protection, so both match exactly what's needed in the question. Not totally sure if I'm missing any odd scenario, but I can't see how the others fit. Let me know if you see another angle.
Yeah, it's definitely C. dBm is the absolute unit for received signal strength on a log scale. dBi trips people up since it's relative (antenna gain), not absolute. Seen this exact kind of wording come up in a lot of CWNA practice sets.
Pretty confident it's C here. STA can only be associated to one AP, so if it's still connected to AP-2, then on AP-1 it stays authenticated but unassociated. Seen similar wording pop up in practice sets, but open if anyone's got a counterpoint.
I don’t think it’s B-WPA2 is just about securing the wireless link, not controlling access after connection. A (RBAC) allows you to assign rights based on department, so each employee gets different permissions even on the same SSID. Pretty sure that’s what they’re looking for here. Anybody see a reason why it might be something else?