CyberCertPrepSecurity FundamentalsSecurity ToolsEASYFree question
What is the primary difference between a vulnerability scan and a penetration test?
- A.A vulnerability scan automatically identifies known weaknesses; a penetration test actively attempts to exploit them
- B.Vulnerability scans are manual; penetration tests are automated
- C.Vulnerability scans cost more than penetration tests
- D.There is no practical difference
Why A is correct
A vulnerability scan is an automated process that identifies known vulnerabilities by comparing system configurations against a database of known issues. A penetration test goes further by having a skilled tester actively attempt to exploit vulnerabilities to determine real-world impact. Vulnerability scans find potential weaknesses; penetration tests prove they are exploitable.
Know someone studying for Security Fundamentals? Send them this one.