Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 CSSLP Exam - Topic 4 Question 31 Discussion

Posted by Lawrence on May 10, 2022 at 02:46 AM

Which of the following security architectures defines how to integrate widely disparate applications for a world that is Web-based and uses multiple implementation platforms?

Suggested Answer: C

In computing, a service-oriented architecture (SOA) is a flexible set of design principles used during the phases of systems development and

integration. A deployed SOA-based architecture will provide a loosely-integrated suite of services that can be used within multiple business

domains.

SOA also generally provides a way for consumers of services, such as web-based applications, to be aware of available SOA-based services.

For example, several disparate departments within a company may develop and deploy SOA services in different implementation languages;

their respective clients will benefit from a well understood, well defined interface to access them. XML is commonly used for interfacing with

SOA services, though this is not required.

SOA defines how to integrate widely disparate applications for a world that is Web-based and uses multiple implementation platforms. Rather

than defining an API, SOA defines the interface in terms of protocols and functionality. An endpoint is the entry point for such an SOA

implementation.

(Layer interaction in Service-oriented architecture)

Answer A is incorrect. SABSA (Sherwood Applied Business Security Architecture) is a framework and methodology for Enterprise Security

Architecture and Service Management. SABSA is a model and a methodology for developing risk-driven enterprise information security

architectures and for delivering security infrastructure solutions that support critical business initiatives. The primary characteristic of the

SABSA model is that everything must be derived from an analysis of the business requirements for security, especially those in which security

has an enabling function through which new business opportunities can be developed and exploited.

Answer D is incorrect. The service-oriented modeling and architecture (SOMA) includes an analysis and design method that extends

traditional object-oriented and component-based analysis and design methods to include concerns relevant to and supporting SOA.

Answer B is incorrect. Enterprise architecture describes the terminology, the composition of subsystems, and their relationships with

the external environment, and the guiding principles for the design and evolution of an enterprise.


Get Premium CSSLP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
12 comments · newest first
CA
Candida 11 months ago
Not sure about C, seems too simplistic for complex integrations.
BR
Brandon 12 months ago
I agree with C, it’s all about services these days!
GE
Georgiann 12 months ago
Wait, isn't A just for business security?
SH
Shawn 12 months ago
I think B is more relevant for integrating applications.
DA
Dalene 1 year ago
Definitely C, service-oriented architecture is the way to go!
LE
Leonard 1 year ago
I feel like Sherwood Applied Business Security Architecture might be relevant, but I can't recall the specifics. It seems more focused on security than integration.
CA
Casey 1 year ago
I practiced a question like this before, and I think the answer was Service-oriented architecture. It fits the web-based context.
AD
Adell 1 year ago
I'm not entirely sure, but I remember something about enterprise architecture being more about the overall structure rather than just integration.
LO
Louisa 1 year ago
I think this question is about integrating applications, so maybe it's Service-oriented architecture? That sounds familiar.
WA
Wayne 1 year ago
Hmm, I'm not totally sure about this one. I know SD-WAN has something to do with managing network traffic, but I'm not familiar with the specifics of the forwarding profile. I'll have to think this through carefully.
MA
Mammie 1 year ago
The pay-for-use monitor option seems like the most logical choice, since it's directly related to the idea of measuring and billing for cloud usage. I'll go with that.
RU
Rusty 1 year ago
The Posture service could be related, but I think it's more focused on compliance checks rather than endpoint identification.
0/2000 characters

Save Cancel