Which two actions should you perform before you create the central access rule?

Your network contains an Active Directory domain.
You plan to implement Dynamic Access Control.
You need to create a central access rule that will grant permissions to users who have the Department attribute set to Finance. The users must have access to resources that have the Department property set to Finance.
Which two actions should you perform before you create the central access rule? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
A. Enable a claim type
B. Create a central access policy
C. Create a resource property list
D. Enable a resource property
E. Create a claim type