ISSAP practice question 21 of 30

Which of the following security architectures defines how to integrate widely disparate applications for a world that is Web-based and uses multiple implementation platforms?

Full set: 237 questions
Answer options
A: Sherwood Applied Business Security Architecture
B: Service-oriented modeling and architecture
C: Enterprise architecture
D: Service-oriented architecture Correct answer
Correct Answer:
D. Service-oriented architecture
Explanation

Service-Oriented Architecture (SOA) is an architectural style for building software applications that use services available in a network, such as the web. Its fundamental principle is to achieve loose coupling among interacting software agents. SOA is designed specifically to integrate disparate applications, often running on different platforms and built with different technologies, by exposing their functionality as standardized, discoverable services. This approach directly addresses the need to connect heterogeneous systems in a web-based world, promoting interoperability and reusability across an enterprise.

Why Incorrect

A. Sherwood Applied Business Security Architecture (SABSA) is a framework and methodology for developing risk-driven enterprise security architecture, not a specific application integration pattern.
B. Service-oriented modeling and architecture (SOMA) is a methodology developed by IBM for identifying, specifying, and realizing services for an SOA; it is the process, not the architecture itself.
C. Enterprise architecture is a holistic discipline that includes business, data, application, and technology domains. SOA is a specific style within the application architecture domain, making it the more precise answer.

References

1. Papazoglou

M. P.

& van den Heuvel

W. J. (2007). Service oriented architectures: approaches

technologies and research issues. The VLDB Journal

16(3)

389-415. In Section 2

"The SOA paradigm

" the paper states

"SOA is an architectural paradigm for building software applications that use services available in a network... SOA promotes loose coupling between service providers and service consumers

which makes it possible to build flexible

configurable and composite applications." (DOI: https://doi.org/10.1007/s00778-007-0044-3)

2. The Open Group. (2011). SOA Source Book (G113). The Open Group. In Chapter 2

"SOA and Service-Orientation

" it defines SOA as "an architectural style that supports service-orientation" and emphasizes its role in integrating heterogeneous environments.

3. Lewis

G. A.

Smith

D. B.

& Kontogiannis

K. (2007). A Research Agenda for Service-Oriented Architecture (SOA): A European Perspective (CMU/SEI-2007-TN-004). Carnegie Mellon University

Software Engineering Institute. The report defines SOA as "a way of designing

developing

and managing enterprise IT to provide agile

flexible

and reusable business-aligned services

" highlighting its role in enterprise application integration. (p. 1).

4. The SABSA Institute. (2009). The SABSA Method. The official documentation defines SABSA as a "methodology for developing a risk-driven Enterprise Information Security and Information Assurance Architecture

" distinguishing it from an application integration architecture like SOA.

Scroll to Top