OAT (Operational Acceptance Testing) performs non-functional testing such as security, usability, reliability, and compatibility testing, but excludes performance testing. Option A correctly describes this scope. Options B incorrectly includes performance testing, while C incorrectly suggests functional testing which is done in other phases.