Crimson Cloud interview question

Difference between security group & NACL