Explain the difference between vulnerability assessment and penetration testing.

Vulnerability assessment identifies and catalogs security weaknesses in systems, while penetration testing actively exploits these vulnerabilities to demonstrate real-world attack scenarios. Vulnerability assessment is broader and automated, while penetration testing is deeper and manual, simulating actual attacker behavior to assess the true security posture.