In secure software design and development, what is meant by dynamic application security testing?

A. testing a running application for security weaknesses B. designing class diagrams C. reading source code only D. writing policy documents only