Why should a guest WLAN be isolated from administrative systems?

1. To restrict lateral access from untrusted clients
2. To eliminate all radio interference
3. To make private IP addresses globally routable
4. To replace endpoint authentication