In the course of a wireless network forensics operation at a technology firm in Austin,...

The best answer is C because wireless traffic in enterprise environments may be distributed across multiple access points and channels, which means a single capture position or standard capture setup can miss portions of the conversation. That creates the exact symptom described in the question: partial captures and gaps that make it difficult to correlate timestamps and device activity. CHFI v11 includes wireless network investigation and detection of access point issues, spoofing, and related wireless attack conditions, so candidates are expected to understand that collection limitations often arise from the architecture of the wireless environment itself. The problem here is not simply that results are inaccurate in a general sense. It is that the investigator cannot see all relevant traffic when it is spread across different infrastructure points. Interoperability with other networks does not explain the missing packets, and impersonation attacks may complicate attribution but do not best explain incomplete capture visibility. In forensic practice, incomplete observation across multiple access points is a direct and common reason wireless evidence becomes fragmented and correlation becomes difficult.