To simplify things for you, hub -> shared bandwidth, switch -> dedicated/port. Overly simplified, but you get the idea and it should answer your question about those two.
Is this only an internal network or will it have exposure to the outside world? Therein lies a bigger question.