A medium$-$sized enterprise wants to redesign its network architecture to include a guest Wi$-$Fi network that allows visitors internet access without exposing the company's internal resources. The IT team is considering implementing a screened subnet.

Which of the following approaches would be MOST appropriate for this scenario?

A$.$Implement a screened subnet using a single firewall with three network interfaces: one for the internal network, one for the guest Wi$-$Fi network, and one for the internet connection.

B$.$Implement a screened subnet with two firewalls, placing the guest Wi$-$Fi network and the internal network on the same side of the internal firewall.

C$.$Implement a screened subnet with two firewalls, placing the guest Wi$-$Fi network in the perimeter network and the internal network behind the second firewall.

D$.$Avoid using a screened subnet and instead connect the guest Wi$-$Fi network directly to the Internet without any firewall protection.