C vulnerability assessment is generally a comparatively fast, broad, often automated survey identifying known technical weaknesses across a wide estate, without necessarily emulating a specific adversary's tradecraft or objectives. CBEST, by contrast, is deep and narrow: it emulates a plausible, specific threat actor's goals and methods against carefully scoped Important Business Services, incorporating people, process and technology, and typically runs over a much longer engagement window. These are complementary but fundamentally different activities, not equivalent (C) or simply differentiated by scope breadth alone (B) or duration (A) - the defining distinction is realism and intelligence-led scenario design.