Multiple choice technology security

What is the difference between network vulnerability assessment and a penetration test?

  1. A penetration test enumerates resources, and a vulnerability assessment enumerates vulnerabilities

  2. They are one and the same

  3. A penetration test identifies running services, and vulnerability assessments provide a more in-depth understanding of vulnerabilities

  4. A penetration test exploits vulnerabilities, and a vulnerability assessment finds vulnerabilities
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

A vulnerability assessment is the process of identifying, quantifying, and prioritizing (or ranking) the vulnerabilities in a system - it is passive and enumerates potential issues. A penetration test goes a step further by actively exploiting those vulnerabilities to demonstrate their impact and determine the actual risk. The key difference is that pen testing involves exploitation, while vulnerability assessment is limited to discovery and classification.

Keep practicing — related questions