Vulnerability scan vs penetration test: what's the difference?

The short version: A scan is automated, broad and frequent; a penetration test is manual, deep and periodic. Scans answer "what known weaknesses exist?"; tests answer "what could an attacker actually