What should be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?

What should be configured on the Cisco ISE authentication policy for unknown MAC addresses/identities for successful authentication?
A. continue
B. pass
C. drop
D. reject