The correct answer is (a) Obligation policies
To elaborate: The Ponder language is regarded as a declarative, object-oriented language that can define obligation and authorization policies. Obligation policies are event-triggered condition-action rules that can be used to describe adaptable management actions. Authorization policies are used to define the set of resources available for each user access.