[&] Which layer of the Incident Response Hierarchy of Needs focuses on identifying adversaries and their capabilities?
- Threats -- Correct
- Inventory
- Triage
- Telemetry

[&] Which layer deals with continuously monitoring adversary actions once identified?
- Tracking -- Correct
- Detection
- Act
- Telemetry

[&] What is the primary purpose of the Incident Response Hierarchy of Needs?
- To outline the tools required for security monitoring
- To compare different incident response models
- To describe layers of readiness for security incident response -- Correct
- To define roles within an incident response team

[&] Why is the collaboration layer essential in the Incident Response Hierarchy of Needs?
- It focuses on internal communications
- It emphasizes sharing insights to disrupt adversary campaigns -- Correct
- It ensures the use of advanced tools
- It prioritizes individual responsibility

[&] What signifies that an organization has reached a proactive stage in its incident response process?
- Effective asset inventory management
- Ability to perform threat hunting -- Correct
- Use of automated detection systems
- Capability to deploy proven countermeasures