Sage interview question

What's the difference between Security group and a distribution group?