While the other options contain some truths, they do not capture the fundamental operational characteristic that most distinctly differentiates Network ACLs from Security Groups. The stateless nature and sequential rule processing are the key unique features highlighted in option D).
The other options are less precise:
A) Partially describes Network ACLs but doesn't capture their core operational uniqueness.
B) Is not a distinctive feature of Network ACLs.
C) Is not a primary distinguishing characteristic of Network ACLs.
Network ACLs possess a distinctive operational characteristic of being stateless, which means they evaluate each packet independently for inbound and outbound traffic, unlike Security Groups that are stateful and automatically allow return traffic. ACLs process rules in a sequential, numbered order from lowest to highest, with the first matching rule determining whether a packet is allowed or denied.
Be aware that security groups are particularly prominent and well-defined in cloud environments.