The CIA triad, categories of malware, phishing and social engineering, authentication versus authorisation and multi-factor authentication, symmetric and asymmetric encryption and what a digital certificate does, firewalls, and safe-backup practice.
Reading the 8 sections above, the worked examples and the practice set is free — the whole knowledge base is on the free plan, along with flashcards, private notes and Ask Onely.