Select which is TRUE about Asset Centric Approach in Threat Modelling.

a$.$

Determines an acceptable risk level

b$.$

Evaluates the application being modeled.

c$.$

Puts the user into the mindset of an attacker.

d$.$

Identifies controls to mitigate.