Which advanced authentication setting is needed to allow an unknown device to utilize Central WebAuth?

Which advanced authentication setting is needed to allow an unknown device to utilize Central
WebAuth?

A.
If Authentication failed > Continue

B.
If Authentication failed > Drop

C.
If user not found > Continue

D.
If user not found > Reject