Citi interview question

Application Security testing methods, tools for performing application security testing.