What is the difference between a vulnerability assessment and a penetration test?

A vulnerability assessment scans broadly to list known weaknesses. A penetration test actively exploits weaknesses within an agreed scope to show real impact. Both need written authorisation.