CyberCertPrepSecurity FundamentalsSecurity ToolsEASYFree question
What is the primary difference between a vulnerability scan and a penetration test?
- A.Vulnerability scans are manual; penetration tests are automated, and a vulnerability scanner exploits every flaw that it identifies
- B.A vulnerability scan automatically identifies known weaknesses; a penetration test actively attempts to exploit them
- C.Vulnerability scans cost more than penetration tests, because penetration testing tools verify compliance with a written policy
- D.There is no practical difference
Why B is correct
A vulnerability scan is an automated process that identifies known vulnerabilities by comparing system configurations against a database of known issues. A penetration test goes further by having a skilled tester actively attempt to exploit vulnerabilities to determine real-world impact. Vulnerability scans find potential weaknesses; penetration tests prove they are exploitable.
Know someone studying for Security Fundamentals? Send them this one.