4 things that surprised me about the CompTIA Security+ exam