[PCI DSS 1.x] 11.3.2 Application-layer penetration tests

11.3.2 Application-layer penetration tests