Which category best describes threat modeling?
A.
Qualitative approach to risk analysis
B.
Value-based approach to risk analysis
C.
Quantitative approach to risk analysis
D.
None of these
Explanation:
Since threat modeling is based on perceptions, opinions, judgments,
and experiences-rather than hard costs and facts-threat modeling is an example of a
qualitative approach to risk analysis. Calculating hard costs and facts would be a
quantitative or value-based approach.