$\underline{\textbf{Answer:}\Rightarrow}\mathbf c$
$\underline{\textbf{Explanation:}\Rightarrow}$
Statement $1$ is right because firewall functions at the application layer and therefore it can monitor traffic going into and out.
Statement $2$ is right because virtual networks can simulate an old leased network but the only difference is that in VPN we have encryption and decryption but not in the leased network.