Which of the Following Statements Highlights the Difference Between a Vulnerability

Which of the following statements highlights the difference between a vulnerability assessment and a penetration test?

A) A vulnerability assessment identifies and ranks the vulnerabilities, and a penetration test exploits the identified vulnerabilities for validation and to determine impact.
B) A vulnerability assessment focuses on low severity vulnerabilities and pen testing focuses on high severity vulnerabilities.
C) A vulnerability assessment requires only automated tools to discover the vulnerabilities whereas pen testing also involves manual discovery of vulnerabilities.
D) A vulnerability assessment is performed only on software components of an information system, whereas pen testing is performed on all hardware and software components of the system.