You have an Azure subscription.

You need to implement a policy to ensure that all new resource groups include a value for a tag named Department.

The solution must ensure that if a value is NOT entered for the Department tag, a resource group is created.

Which effect should you use?