Which two role-based access control (RBAC) roles should you assign to ServerAdmins?

You have an Azure subscription that contains the resources shown in the following table.

You need to ensure that ServerAdmins can perform the following tasks:

Create virtual machine to the existing virtual network in RG2 only.

The solution must use the principle of least privilege.

Which two role-based access control (RBAC) roles should you assign to ServerAdmins? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A . the Contributor role for the subscription
B . the Network Contributor role for RG2
C . A custom RBAC role for the subscription
D . a custom RBAC role for RG2
E . the Network Contributor role for RG1.
F . the Virtual Machine Contributor role for RG1.

Answer: B,F