With an Azure AD subscription, how many security groups are minimally required to deploy five VMs in a virtual network subnet, each with identical public and private IP addresses and identical inbound/outbound security rules?