Penetration Testing evaluates the ability of the target's security control in blocking or preventing attacks. VAPT can be done as internal & external penetration testing to simulate different attack scenarios.