You have two Azure subscriptions named Sub1 and Sub2 that contain the virtual networks shown...

You have two Azure subscriptions named Sub1 and Sub2 that contain the virtual networks shown in the following table.

You have an Azure Virtual Network Manager instance named AVNM1 that has the following configurations:

* Management scope: Sub1

* Network groups:

* NetGrp1: Static membership that includes VNet1

* NetGrp2: Dynamic membership that has the following criteria: Tags that contain Red

* Security admin rule collection: SARule1

* Deployed to all Azure regions

You create two new virtual networks as shown in the following table.

Which virtual networks will have SARule1 applied?