4. Security and Disaster Recovery (24%)

Security and disaster recovery are two sides of the same coin: both exist because bad things happen, and both are about ensuring the organization can continue operating when they do. Security prevents and contains threats; disaster recovery restores operations after they succeed.

At 24% of the exam, this domain is significant. It covers eight specific topics ranging from data encryption and physical security through identity management, server hardening, decommissioning, and full DR planning. The exam tests practical decision-making: not just "what is MFA?" but "given a scenario, which access control method is appropriate?"