A WPA2 enterprise wireless network has been subject to several attacks within the last month. Which of the following would be the BEST option to improve the security of the network?

Changing the SSID (Service Set Identifier) does not inherently improve security; it merely changes the network's broadcast name and can be easily discovered.

WPA2 Enterprise networks typically use 802.1X authentication with individual user credentials, not a single default password for all users, so changing a "default password" is not the primary mechanism for enterprise security in this context.

WEP (Wired Equivalent Privacy) is an outdated and highly insecure encryption protocol; switching to it would drastically decrease, not improve, network security.

A WPA2 Enterprise network uses 802.1X and typically integrates with a RADIUS server for individual user authentication, making "changing the default password" less relevant for enterprise security and more for pre-shared key (PSK) networks. Creating a guest network isolates potentially less secure guest devices from the main enterprise network, preventing them from accessing internal resources or spreading malware, thereby significantly improving overall security posture by reducing the attack surface on the primary network.