What is the difference between a vulnerability scan and a penetration test?

Question

Options

• AA vulnerability scan is a less comprehensive security assessment that only looks for known
• BA vulnerability scan is a comprehensive security assessment that tests all aspects of a network,
• CA vulnerability scan and a penetration test are both types of logical access control.
• DA vulnerability scan and a penetration test are the same thing.

• A
  6% (3)
• B
  88% (42)
• C
  4% (2)
• D
  2% (1)

Explanation

A vulnerability scan and a penetration test are distinct assessments with different scopes and depth. A vulnerability scan is typically automated, identifying known vulnerabilities by comparing system configurations against a database of CVEs - it flags potential weaknesses but does not exploit them. A penetration test goes further: a tester (human or tool-assisted) actively attempts to exploit discovered vulnerabilities to determine real-world impact and attack paths. They are not the same thing (D), and neither is a type of logical access control (C). The key distinction is passive detection (scan) versus active exploitation (pen test).

No community discussion yet for this question.