A. A penetration test seeks to actively exploit any known or discovered vulnerabilities.
B. A penetration test looks for known vulnerabilities and reports them without further action.
C. A penetration test is always an automated process - a vulnerability scan never is.
D. A penetration test never uses common tools such as Nrnap, Nessus and Metasploit.