Which of the following assessments would Pete, the security administrator, use to actively test that

Which of the following assessments would Pete, the security administrator, use to actively test that an applications security controls are in place?

A.
Code review

B.
Penetration test

C.
Protocol analyzer

D.
Vulnerability scan