Vulnerability Assessments or Penetration Testing – Choose Wisely!