Penetration testing or ethical hacking is used to simulate an intrusion into your IT system
Typically a VA is an overarching review of any number of areas.
PCI DSS Onsite Review
PCI DSS reviews verify merchants comply with relevant requirements of the PCI DSS.
'The Future is Not Set'