Security+ concepts, cryptography, architecture and the jobs behind them.
This is the part people skip and then get caught by. You will want to pull a host off the network and someone will ask which policy let you. Knowing the frameworks means you can act during an incident instead of waking a director to ask permission.