Taxfix interview question

How do you do threat modelling exercise?