Multiple choice technology security

What is the difference between network vulnerability assessment and a penetration test?

  1. A penetration test enumerates resources, and a vulnerability assessment enumerates vulnerabilities

  2. They are one and the same

  3. A penetration test identifies running services, and vulnerability assessments provide a more in-depth understanding of vulnerabilities

  4. A penetration test exploits vulnerabilities, and a vulnerability assessment finds vulnerabilities
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

A vulnerability assessment identifies and categorizes vulnerabilities without exploiting them - it's an inventory and risk evaluation. A penetration test actively exploits vulnerabilities to demonstrate impact and test defenses. They're complementary: assessment finds the weaknesses, penetration testing proves they're exploitable and measures real-world risk.

Keep practicing — related questions