Penetration testing may be included as part of a comprehensive assessment. During a penetration test, cybersecurity professionals simulate real-world attacks to determine whether identified vulnerabilities can be exploited. Penetration testing and vulnerability scanning are different but complementary tools that can provide a more complete view of an organization’s cybersecurity risk.