KPMG Interview Question

They asked mainly about web application security pentesting.