Final answer:
The best solution would be VLANs and 802.1x.
Step-by-step explanation:
The solution that would best meet this need is VLANs and 802.1x. VLANs (Virtual Local Area Networks) allow you to logically segment your network into different virtual networks, while 802.1x is an authentication protocol that enables network access control. By combining these two technologies, you can create a separate VLAN for guests that only provides Internet access and restricts access to internal network resources.