Which of the following security architectures defines how to integrate widely disparate applications for a world that is Web-based and uses multiple implementation platforms? (ISC)2 CISSP-ISSAP Exam

Question

Options

• ASherwood Applied Business Security Architecture
• BService-oriented modeling and architecture
• CEnterprise architecture
• DService-oriented architecture

• A
  18% (12)
• B
  5% (3)
• C
  6% (4)
• D
  71% (46)

Explanation

Service-oriented architecture (SOA) is specifically designed to integrate disparate applications across heterogeneous platforms using standardized, interoperable services - making it the architecture built for Web-based, multi-platform environments. SOA accomplishes this through loosely coupled services (typically via SOAP, REST, or similar protocols) that can be consumed regardless of the underlying technology stack.

Why the distractors are wrong:

• A (SABSA) - Sherwood Applied Business Security Architecture is a risk-driven enterprise security framework focused on aligning security to business objectives, not application integration.
• B (SOMA) - Service-oriented modeling and architecture is a methodology for designing SOA solutions, not an architecture itself; it's the process, not the structure.
• C (Enterprise architecture) - EA is a broader governance and planning framework (e.g., TOGAF, Zachman) that addresses an organization's overall IT strategy, not specifically Web-based application integration.

Memory tip: Think of SOA as the "universal adapter" for software - just as a universal power adapter lets you plug any device into any outlet worldwide, SOA lets disparate apps "plug into" each other across any platform via standardized service interfaces.

No community discussion yet for this question.