Ann, a security administrator, has been instructed to perform fuzz-based testing on the company's applications. Which of the following best describes what she will do?

Fuzz testing specifically entails feeding random, malformed, or invalid inputs into an application to intentionally provoke errors, crashes, or other unexpected behaviors, thereby uncovering potential security vulnerabilities or software bugs caused by improper input validation.

Eliminating horizontal privilege escalation is a goal of access control testing and secure design, not the method of inputting random data characteristic of fuzz testing.

Testing for built-in backdoors typically involves code review, reverse engineering, or static analysis, which is distinct from the dynamic input-based approach of fuzzing.

Hashing an application to address Host Intrusion Prevention System (HIPS) false positives is a process related to software integrity verification or whitelisting for endpoint security, entirely unrelated to application vulnerability testing via fuzzing.