You work as a CSO (Chief Security Officer) for Tech Perfect Inc. You want to perform the following
tasks:

Develop a risk-driven enterprise information security architecture. Deliver security infrastructure
solutions that support critical business initiatives. Which of the following methods will you use to
accomplish these tasks?

A.
Service-oriented architecture

B.
Sherwood Applied Business Security Architecture

C.
Service-oriented modeling framework

D.
Service-oriented modeling and architecture

Explanation:
SABSA (Sherwood Applied Business Security Architecture) is a framework and
methodology for Enterprise Security Architecture and Service
Management. SABSA is a model and a methodology for developing risk-driven enterprise
information security architectures and for delivering
security infrastructure solutions that support critical business initiatives. The primary characteristic
of the SABSA model is that everything must
be derived from an analysis of the business requirements for security, especially those in which
security has an enabling function through
which new business opportunities can be developed and exploited.
Answer option C is incorrect. The service-oriented modeling framework (SOMF) is a service-oriented
development life cycle methodology. It
offers a number of modeling practices and disciplines that contribute to a successful serviceoriented life cycle management and modeling. The
service-oriented modeling framework illustrates the major elements that identify the “what to do”
aspects of a service development scheme.
Answer option D is incorrect. The service-oriented modeling and architecture (SOMA) includes an
analysis and design method that extends
traditional object-oriented and component-based analysis and design methods to include concerns
relevant to and supporting SOA.
Answer option A is incorrect. The service-oriented architecture (SOA) is a flexible set of design
principles used during the phases of systems
development and integration.