In an NPS (Network Policy Server) environment, if an incoming connection does not match any network policy, it is typically **automatically denied**. This means that if the connection request does not meet any defined criteria in the existing network policies, access is not granted.
Therefore, the correct answer is:
- **It is automatically denied.**


