What is the difference between vulnerability assessment and penetration testing?

Vulnerability assessment identifies and categorizes potential security weaknesses in a system, while penetration testing actively exploits these vulnerabilities to assess how an attacker could compromise the system. Penetration testing provides a more detailed view of vulnerability exploitation and potential impact, whereas vulnerability assessments offer a broader overview of potential risks.