ISSAP practice question 21 of 30
Which of the following security architectures defines how to integrate widely disparate applications for a world that is Web-based and uses multiple implementation platforms?
Full set: 237 questionsService-Oriented Architecture (SOA) is an architectural style for building software applications that use services available in a network, such as the web. Its fundamental principle is to achieve loose coupling among interacting software agents. SOA is designed specifically to integrate disparate applications, often running on different platforms and built with different technologies, by exposing their functionality as standardized, discoverable services. This approach directly addresses the need to connect heterogeneous systems in a web-based world, promoting interoperability and reusability across an enterprise.
A. Sherwood Applied Business Security Architecture (SABSA) is a framework and methodology for developing risk-driven enterprise security architecture, not a specific application integration pattern.
B. Service-oriented modeling and architecture (SOMA) is a methodology developed by IBM for identifying, specifying, and realizing services for an SOA; it is the process, not the architecture itself.
C. Enterprise architecture is a holistic discipline that includes business, data, application, and technology domains. SOA is a specific style within the application architecture domain, making it the more precise answer.
1. Papazoglou
M. P.
& van den Heuvel
W. J. (2007). Service oriented architectures: approaches
technologies and research issues. The VLDB Journal
16(3)
389-415. In Section 2
"The SOA paradigm
" the paper states
"SOA is an architectural paradigm for building software applications that use services available in a network... SOA promotes loose coupling between service providers and service consumers
which makes it possible to build flexible
configurable and composite applications." (DOI: https://doi.org/10.1007/s00778-007-0044-3)
2. The Open Group. (2011). SOA Source Book (G113). The Open Group. In Chapter 2
"SOA and Service-Orientation
" it defines SOA as "an architectural style that supports service-orientation" and emphasizes its role in integrating heterogeneous environments.
3. Lewis
G. A.
Smith
D. B.
& Kontogiannis
K. (2007). A Research Agenda for Service-Oriented Architecture (SOA): A European Perspective (CMU/SEI-2007-TN-004). Carnegie Mellon University
Software Engineering Institute. The report defines SOA as "a way of designing
developing
and managing enterprise IT to provide agile
flexible
and reusable business-aligned services
" highlighting its role in enterprise application integration. (p. 1).
4. The SABSA Institute. (2009). The SABSA Method. The official documentation defines SABSA as a "methodology for developing a risk-driven Enterprise Information Security and Information Assurance Architecture
" distinguishing it from an application integration architecture like SOA.
Keep practicing
Take the free ISSAP practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other ISSAP practice questions
- Question 1Which of the following heights of fence deters only casual trespassers?
- Question 2Your customer is concerned about security. He wants to make certain no one in the outside…
- Question 3Which of the following layers of the OSI model provides non-repudiation services?
- Question 4Which of the following plans is a comprehensive statement of consistent actions to be tak…
- Question 5Which of the following user authentications are supported by the SSH-1 protocol but not b…
- Question 6Which of the following is a correct sequence of different layers of Open System Interconn…
