An internal employee has sold a copy of the production customer database that was being used
for upgrade testing to outside parties via HTTP file upload. The Chief Information Officer (CIO) has
resigned and the Chief Executive Officer (CEO) has tasked the incoming CIO with putting effective
controls in place to help prevent this from occurring again in the future. Which of the following
controls is the MOST effective in preventing this threat from re-occurring?

A security manager has provided a Statement of Work (SOW) to an external penetration testing
firm for a web application security test. The web application starts with a very simple HTML survey
form with two components: a country selection dropdown list and a submit button. The penetration
testers are required to provide their test cases for this survey form in advance. In order to
adequately test the input validation of the survey form, which of the following tools would be the
BEST tool for the technician to use?