A multi-project network needs separation of network administration from application deployment without copying network configurations into each project. Which approach best fits?

1. Separate host-project network roles from service-project application roles.
2. Reserve an address plan that includes expected primary and secondary range growth.
3. Choose service-oriented Private Service Connect rather than broad network peering.
4. Design separate networks or policy boundaries and document allowed cross-boundary paths.