An adult reports visible haematuria. Which evaluation is recommended to exclude urinary tract malignancy?