Penetration Tests Scan every host.
Exploit the vulnerability. Post-exploit, extract info, pivot to gain more access to other hosts. Identify and Protect, then see what impact an attacker has.
Advanced Persistent Threats(APT), Regular pen not enough Pen Tests are: