where would non-authenticated users be placed?

In a bring-your-own-device deployment, where would non-authenticated users be placed?

A.
C-VLAN

B.
guest VLAN

C.
production VLAN

D.
S-VLAN