DRAG DROP
Your network contains an Active Directory domain named contoso.com. All file servers in the
domain run Windows Server 2012 R2.
The computer accounts of the file servers are in an organizational unit (OU) named OU1. A
Group Policy object (GPO) named GPO1 is linked to OU1.
You plan to modify the NTFS permissions for many folders on the file servers by using
central access policies.
You need to identify any users who will be denied access to resources that they can
currently access once the new permissions are implemented.
In which order should you Perform the five actions?
Answer: 
Explanation:
https://technet.microsoft.com/en-us/library/hh846167.aspx
Seems correct… Rule, policy, GPO, security settings, event log
Box 1: Create a central access rule.
Box 2: Create a central access policy.
Box 3: In GPO1, MODIFY the Audit Central Access Policy Staging setting & configure the Central Access Policy settings.
Box 4: Modify the Secuirty settings of the shared folders on the file servers.
Box 5: Search for FALIURE events in the security logs from the file server.