Lisa needs to identify if a risk exists on a web application and if attackers can potentially bypass security controls. However, she should not actively test the application. Which of the following is the BEST choice?A. perform a penetration testB. perform a port scanC. perform a vulnerability scanD. perform traffic analysis with a sniffer