Direct answer
Understanding a company's business model means being able to say, in one pass, who pays whom for what, and being able to point to the single biggest lever for growth and the single biggest point of fragility right now, not just describe the mechanics in general terms. The opportunity and the risk are often the same underlying thing viewed from two directions: whatever the business depends on most heavily is usually both its biggest lever and its biggest exposure.
Structured elaboration
A simple test for whether the understanding is real
Can the model be described, without jargon, in terms of who the paying customer is, what they're actually paying for, and what it costs to provide it. If any of those three is fuzzy, the understanding is surface-level.
Finding the opportunity: look for friction, not features
The biggest opportunities in most business models sit at friction points, the places where the promise made to a customer is hardest to keep reliably: slow or inconsistent matching between supply and demand, unpredictable fulfillment, or a customer segment that's underserved relative to its potential value. These are attractive opportunities because fixing one friction point tends to move several metrics at once (conversion, retention, and satisfaction together), rather than moving one metric in isolation the way a single new feature usually does.
Finding the risk: look for the single point of dependency
The biggest risk in a business model is usually the thing it relies on most that it doesn't own or control: a single dominant acquisition channel, a single class of supply-side partner, a single regulatory environment, or a single large customer segment. That dependency is worth naming specifically, because saying the risk is competition or the risk is the market is true of every company and says nothing about this one.
Why opportunity and risk often point to the same place
A company's biggest current growth lever (say, an under-monetized but highly engaged customer segment) is frequently also its biggest exposure (that segment's spending habits, regulatory treatment, or platform dependency is not something the company fully controls), because the parts of the business generating the most value are also the parts with the most riding on them.
Worked example
Take a logistics or marketplace-style business as a worked case: the model depends on matching customer demand to a supply-partner network and executing fulfillment reliably. The friction point most likely to be the biggest opportunity is exception handling, what happens when a match fails or a delivery promise slips, because fixing that reliably improves conversion (customers trust the promise more), retention (fewer bad experiences), and unit economics (fewer refunds and support costs) simultaneously. The same company's biggest risk is very likely its dependency on that same supply-partner network staying available and cooperative: if a large share of supply partners could leave for a competitor or be reclassified under different labor rules, the company's ability to keep its fulfillment promise is directly exposed, the same dependency that makes the friction point valuable to fix is what makes it risky.
Trade-offs and pitfalls
- Describing the business model in purely structural terms (marketplace, subscription, advertising) without naming a specific current lever or exposure is technically correct but not what this question is testing; the interviewer wants judgment about what matters right now, not a taxonomy.
- Naming a generic risk (competition, macro conditions) instead of a specific dependency is the most common way this answer falls flat.
- Treating opportunity and risk as unrelated, rather than noticing they often point to the same underlying dependency, misses the more senior version of this answer.