Multiple choice technology security

What is the difference between network vulnerability assessment and a penetration test?

  1. A penetration test enumerates resources, and a vulnerability assessment enumerates vulnerabilities

  2. They are one and the same

  3. A penetration test identifies running services, and vulnerability assessments provide a more in-depth understanding of vulnerabilities

  4. A penetration test exploits vulnerabilities, and a vulnerability assessment finds vulnerabilities

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Vulnerability assessments identify and quantify vulnerabilities without attempting exploitation. Penetration testing goes further by actively attempting to exploit vulnerabilities to demonstrate their impact. Assessment is about discovery; penetration testing is about proving exploitability.