You manage an Azure subscription that contains 1,000 resources. You must produce compliance reports that allow grouping resources by department. Which combination of tools should you use to organize and classify the resources for reporting?

Azure Policy and tags are the most effective combination for organizing and classifying resources for compliance reporting. Tags allow you to categorize resources with key-value pairs, such as "Department: Finance" or "Environment: Production." Azure Policy can then be used to enforce tagging standards, audit tag compliance, and generate reports based on these tags. This enables grouping resources by department for compliance purposes. Application groups and quotas are used for managing application access and resource limits, not for classification. Administrative units and Azure Lighthouse are for delegated management across tenants or subscriptions, not for internal resource organization. Resource groups are for grouping resources with a shared lifecycle, and role assignments manage access control, neither of which directly facilitates flexible, reportable classification by arbitrary criteria like department.