Explain the difference between vulnerability assessment and penetration testing, including their respective goals and methodologies.