Discuss Exin ISMP Exam Topic 1 Question 10

In a company the IT strategy is migrating towards a Service Oriented Architecture (SOA) so that migrating to the cloud is better feasible in the future. The security architect is asked to make a first draft of the security

architecture.

Which elements should the security architect draft?

AManagement and control of the security services

BThe information security policy, the risk assessment and the controls in the security services

CWhich security services are provided and in which supporting architectures are they defined

Suggested Answer: C

Get Premium ISMP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Evangelina 11 months ago

I agree, but what about the specific security services?

Tomas 11 months ago

The info security policy should be a top priority!

Eileen 11 months ago

Wait, are we sure SOA is the best way to go for cloud?

Kanisha 11 months ago

I think management of security services is crucial too.

Arlen 12 months ago

Definitely need a solid risk assessment in there!

Kate 12 months ago

I practiced a similar question where risk assessments were key, so I lean towards option B for a comprehensive approach.

Simona 12 months ago

I feel like management and control of security services is fundamental, but I can't recall if that's enough on its own.

Whitney 1 year ago

I'm a bit unsure about the specifics of SOA, but I think option C could be important since it relates to how services interact.

Nobuko 1 year ago

I remember we discussed the importance of having a solid information security policy, so option B seems crucial.

Yesenia 1 year ago

Ah, this is a tricky one. I'm drawing a blank on some of these language names. I'll start by selecting the ones I'm confident about, like Solidity, and then try to reason through the others based on what I know about Ethereum development.

Stephaine 1 year ago

Okay, I've got this. Slashing prices to increase demand and utilize capacity are obvious reasons. The other options about awareness and supply management also seem plausible. I'll select those.

Alex 1 year ago

Hmm, this is a tricky one. I'll need to think through the different roaming architectures carefully to determine which one is not valid.

Pamella 1 year ago

I learned that all these components are kind of interconnected, but I can't recall if Unified Management is in the Collaboration Portfolio at all. Maybe option D?

Exin ISMP Exam - Topic 1 Question 10 Discussion