Domanda di colloquio di nVisium

How would you approach pen testing an app?