Which security method does a Cisco guest wireless deployment that relies on Cisco ISE guest portal for user authentication use?

Which security method does a Cisco guest wireless deployment that relies on Cisco ISE guest portal for user authentication use?
A. Layer 2 and Layer 3
B. Layer 2 only
C. No security methods are needed to deploy CWA
D. Layer 3 only