You have an Azure subscription that contains the resources shown in the following table. 

You need to ensure that ServerAdmins can perform the following tasks: ✑ Create virtual machines in RG1 only. ✑ Connect the virtual machines to the existing virtual networks in RG2 only. The solution must use the principle of least privilege. Which two role-based access control (RBAC) roles should you assign to ServerAdmins? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. 

Answer options:

A. a custom RBAC role for RG2
B. the Network Contributor role for RG2
C. the Contributor role for the subscription
D. a custom RBAC role for the subscription
E. the Network Contributor role for RG1
F. the Virtual Machine Contributor role for RG1

AF

Reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/built-in-roles