Question 1 (2 points) One example of a host-based data feed is: DMZ sensor session data Internal sensor session data Firewall log data Web server log data Question 2 (2 points) The pyramid of pain only applies to threat actors. (Answer is False, freebie as I covered it in such a way that this could be answered wrong.) True False Question 3 (2 points) Data feeds can be network based or host based. True False Question 4 (2 points) Using an understanding of which threat actor is capable of attacking a specialized system is key to which type of targeting? Asset-Centric targeting Developing a threat model Actor-centric targeting Building the kill chain