Many people find the following two domains especially challenging.
- Risk, Response, and Recovery
This is one of those topics that most people don’t work with on a regular basis and it has sufficient depth to really throw you. However, if you understand cryptography at the level required for the Security+ exam, you’ll only need to add a little knowledge.
This topic covers a wide range of topics that are beyond the experience level of someone with only a single year of experience. The topics aren’t overly difficult, but they do require some focused studying.