Which three actions should you perform in sequence?

DRAG DROP
Your network contains an Active Directory domain named contoso.com. The domain contains a file server
named Server1. All servers run Windows Server 2012 R2.
All domain user accounts have the Division attribute automatically populated as part of the user provisioning
process. The Support for Dynamic Access Control andKerberos armoring policy is enabled for the domain.
You need to control access to the file shares on Server1 based on the values in the Division attributeand the
Division resource property.
Which three actions should you perform in sequence?
To answer, move the three appropriate actions from the list of actions to the answer area and arrange them in
the correct order.

Answer: Claim type, Resource property, folders classification

Explanation:
http://technet.microsoft.com/en-us/library/hh846167.aspx
http://blogs.technet.com/b/canitpro/archive/2013/05/07/step-by-step-protecting-your-information-with-dynamicaccess-control.aspx