How would you secure a VPC, and what is the difference between Security Groups and Network Access Control Lists (NACLs)?
