Which of the following allows an attacker to identify vulnerabilities within a closed source software application?

Which of the following allows an attacker to identify vulnerabilities within a closed source software
application?

A.
Fuzzing

B.
Compiling