Wrong answer for question 48.

[abla00]

48. What is the difference between a security group in VPC and a network ACL in VPC?

The correct answer is:
B. Security group restricts access to EC2 while ACL restricts traffic to a subnet
D. Network ACL performs stateless filtering and Security group provides stateful filtering
E. Security group can only set Allow rule, while ACL can set Deny rule also

C. Security group can work outside the VPC also while ACL only works within a VPC
This is wrong, because the question is a security group in VPC.
Security group in VPC cannot work outside the VPC.