A vulnerability assessment scans for known vulnerabilities, while a penetration test tries to exploit and fix the weaknesses actively.