Last Updated on August 15, 2021 by Admin 2
Which of the following statements highlights the difference between a vulnerability assessment and a penetration test?
- A vulnerability assessment identifies and ranks the vulnerabilities, and a penetration test exploits the identified vulnerabilities for validation and to determine impact.
- A vulnerability assessment focuses on low severity vulnerabilities and pen testing focuses on high severity vulnerabilities.
- A vulnerability assessment requires only automated tools to discover the vulnerabilities whereas pen testing also involves manual discovery of vulnerabilities.
- A vulnerability assessment is performed only on software components of an information system, whereas pen testing is performed on all hardware and software components of the system.