What is the difference between PCI DSS penetration testing and vulnerability scanning?

Vulnerability scanning identifies known issues through automated tools, while PCI DSS penetration testing involves manual techniques to actively exploit weaknesses and validate real-world risk. PCI requires penetration testing because it confirms whether security controls can actually prevent unauthorized access to cardholder data.