HanaByte interview question

Difference between a Security Group and a NACL?