What Would Happen If the ProxySG Did Not Use Surrogate

Multiple Choice

What would happen if the ProxySG did not use surrogate credentials to authenticate users who use transparent proxy connections?

A) They would not be able to authenticate to the ProxySG
B) The ProxySG does not need to use surrogate credentials to authenticate users who use transparent proxy connections
C) They would have to reauthenticate for each domain that they access