Fidelity Investments interview question

Web application security, OWASP Top 10, XSS and Types, SQLi and Types, Pentest methodology