What’s the difference between a network pen test and a vulnerability scan?

A vulnerability scan is automated and flags known issues. A penetration test adds expert human analysis, actively exploiting weaknesses to understand the real business impact and uncovering the misconfigurations, credential issues, and lateral movement paths that scanners simply cannot find.