Protected Management Frames
prevents a malicious third party from sending deauth frames and kicking clients off the network and forcing them to reauth, or from otherwise screwing with the network.
By default with 802.11 wifi, even if your traffic is encrypted, so called management frames are not, the setting you listed enables crypto for management frames.