A company's remote administrators need access to internal management services without exposing those services directly to the internet. What is a suitable architecture?

1. Permit management from any internet address during business hours
2. Place management services on the guest wireless network
3. Authenticated gateway with tightly scoped access to management networks
4. Publicly expose every management port with default credentials removed