Update question-2.rst

fix warning

docs/question-2.rst

@@ -29,17 +29,14 @@ that concern your system.
 The two axis on the above table represent the theoretical and evidence-based outcomes.
 
 * Theory includes threats that have potential to impact your system.
-   * Theory-base threats are hypothetical threats. These include brainstorming
-   conducted by your team, known exploits performed in a controlled environment, and
-   hypothetical attacks that have not been leveraged by threat actors.
+
+   * Theory-base threats are hypothetical threats. These include brainstorming conducted by your team, known exploits performed in a controlled environment, and hypothetical attacks that have not been leveraged by threat actors.
 
 * Evidence includes documented threats that have been leveraged against other system(s)
-   * Evidence-based threats are observed threats. These include TTPs used to exploit
-   technology platforms leveraged by your system, known exploits used by adversaries
-   that target your industry, and malicious actions you’ve recorded within your system.
 
-When considered together, these two approaches give a well-rounded view of a system’s
-security posture, both for known and unknown threats.
+   * Evidence-based threats are observed threats. These include TTPs used to exploit technology platforms leveraged by your system, known exploits used by adversaries that target your industry, and malicious actions you’ve recorded within your system.
+
+When considered together, these two approaches give a well-rounded view of a system’s security posture, both for known and unknown threats.
 
 .. figure:: /Graphics/10.png
     :scale: 75%