You are configuring a controller that runs Cisco IOS XE by using the CLI. Which three configuration options are used for 802.11w Protected Management Frames? (Choose three.)

`mandatory` is a specific mode setting for 802.11w PMF, indicating that clients must support and use PMF to connect to the WLAN.

`association-comeback` is a keyword often associated with `association-comeback-time` configuration, a PMF setting that defines how long an AP waits before forcing re-authentication after a security association teardown.

`SA teardown protection` describes a *benefit* or *feature* of 802.11w, not a specific CLI configuration option keyword itself.

`saquery-retry-time` (or similar `sa-query retry-interval`) is a configurable parameter for 802.11w, specifying the retry interval for Security Association Query frames.

`enable` is a general command used to activate features, but it is not a specific configuration option keyword within the detailed PMF settings, which typically involve mode (e.g., mandatory, optional) or timer settings.

`comeback-time` is a component or value within the broader `association-comeback-time` feature, but `association-comeback` itself is the more direct and encompassing configuration option keyword.