What is non-functional testing? Have you done any performance testing?

Performance testing (Can 5000 user’s login to the application at the same time?) Security testing. Simply say NO you have not done so and that performance testing was conducted by a separate team.