A vulnerability assessment is not as intrusive since it does not require an active infiltration of your computing environment. This test gives you a solid overview of the general health of your computing system and its vulnerabilities, but it does not provide the deeper insights of a real hacking event that a pen test offers.