A. A vulnerability scan assesses compliance, while a penetration test assesses security.

B. A vulnerability scan is automated, while a penetration test is not.

C. A vulnerability scan identifies weaknesses, while a penetration test exploits them.

D. A vulnerability scan requires downtime, while a penetration test does not.