Domanda di colloquio di AMCON

What do you look out for when checking how secure a web application deployment is?