What is the difference between a vulnerability assessment and a penetration test?
- A An assessment enumerates known weaknesses automatically; a penetration test attempts actual exploitation
- B A penetration test is automated
- C An assessment proves exploitability
- D They are the same
Answer
An assessment enumerates known weaknesses automatically; a penetration test attempts actual exploitation
A tester can chain several medium findings into full compromise, which a scanner reporting them independently cannot demonstrate.





