How does threat modeling influence testing scope?

• A. It identifies critical assets and high-risk areas, guiding test prioritization, coverage, and resource allocation to verify mitigations.
• B. It eliminates the need for testing.
• C. It focuses testing only on performance issues.
• D. It ensures tests cover every feature equally.

Answer: (A)

Threat modeling starts by identifying what matters most to the security of the system—critical assets, high-value data, and the attacker goals and paths that could reach them. This analysis directly shapes testing scope by revealing where the highest risks live and where mitigations most need verification. With that understanding, testing can be prioritized to validate protections around those assets, build test coverage around the most dangerous attack scenarios, and allocate resources—time, tools, and personnel—where they will have the biggest impact. The result is risk-based testing that focuses on ensuring mitigations for the most important risks are effective, rather than testing every feature equally or neglecting testing altogether.