What is the difference between a Web Application Penetration Test and a Vulnerability Scan?

Vulnerability scans will highlight known weaknesses in a web application. At the same time, a penetration test will show how well existing defenses will hold up against a real-world attack by a cybercriminal.