Explanation: Security groups in VPC are stateful where return traffic is automatically allowed without having to go through the whole evaluation process again. Network ACLs are stateless, meaning return traffic must be explicitly allowed by rules. Reference: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Security….