Which component of Network Access Control $($NAC$)$ system determines what access should be granted?

a$-$ Network Access Server$($NAS$)$

b$-$ Authentication server

c$-$ Policy Server

d$-$ Access Requester $($AR$)$