Company XYZ has purchased and is now deploying a new HTML5 application. The company
wants to hire a penetration tester to evaluate the security of the client and server components of
the proprietary web application before launch. Which of the following is the penetration tester
MOST likely to use while performing black box testing of the security of the company’s purchased
application? (Select TWO).

A.
Code review

B.
Sandbox

C.
Local proxy

D.
Fuzzer

E.
Web vulnerability scanner