DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain
contains a file server named Server1. All servers run Windows Server 2012 R2.
All domain user accounts have the Division attribute automatically populated as part of the
user provisioning process. The Support for Dynamic Access Control and Kerberos armoring
policy is enabled for the domain.
You need to control access to the file shares on Server1 based on the values in the Division
attribute and the Division resource property.
Which three actions should you perform in sequence?
Answer: 
Explanation:
http://technet.microsoft.com/de-de/library/hh846167.aspx
First create a claim type for the property, then create a reference resource property that
points back to the claim. Finally set the classification value on the folder.
Here’s the link to the English version (the one in the answer is in German for some reason)
https://technet.microsoft.com/en-us/library/hh846167.aspx
Agree with this answer.
A list needs to be created before you set folder classifications. You won’t see folder classifications without having a list to choose from.
There’s a Global List created. All you need to do is add the properties to this list. So the option should say “Add the properties”. Create a list itself doesn’t make any difference.
Check my answer on http://www.aiotestking.com/microsoft/which-three-actions-should-you-perform-in-sequence-10/#comment-1204483