what is difference between folder security and web.config security?

using web.config we can force users not to get access to 1 particular page. simialrly, we can place that page in a folder and assign permissions to the folder and perform same task. is this correct?