Box 1: RG6 only -
The policy does not allow the creation of virtual networks/subnets in RG5. Only NSGs can be created in RG4.
Box 2: The policy does not allow the creation of NSGs in RG5.

Reference:
https://docs.microsoft.com/en-us/azure/governance/policy/overview