A security director has contracted an outside testing company to evaluate the security of a newly developed application. None of the parameters or internal work...