All is true about attack tree except $\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_\_.$

a$.$

Identifies assets to be protected.

b$.$

Rinse and repeat is in step to construct attack tree.

c$.$

puts the user into the mindset of an attacker.

d$.$

primary model type in threat analysis when using an attacker$-$centric approach.