a$)$ The following is an extract from the above mentioned article. "Nepali businesses and startups still don't understand the need for cyber security. Instead of treating VAPT $($Vulnerability Assessment and Penetration Testing$)$ as a necessity, many local businesses still consider cyber security as added cost. This lack of awareness made it extremely difficult for us to find local clients," says Subash. "We've built tools that show Nepali business owners the vulnerabilities in their system security and even though they know that the problem exists, they're hesitant to even pay Rs $50,000$ to get it fixed. $"$ Assuming that you are asked to explain the THREE $(3)$ differences between vulnerability assessment and penetration testing, especially to non$-$IT people, how would you explain? $(15$ marks$)$