Which EA area reviews technology relationships and interfaces?

IT Governance and Architecture
Answer Correct answer: A — Application architecture governs system interfaces and data relationships.

An IS auditor is asked to review an organization's technology relationships, interfaces, and data. Which of the following enterprise architecture (EA) areas is MOST appropriate for this review?

  1. Application architecture Correct Answer
  2. Infrastructure architecture
  3. Reference architecture
  4. Information security architecture
cisa application architecture enterprise architecture domains cisa review data interfaces isaca reference architecture

Community Votes

C
50%
A
50%

50% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The question tests the distinction between abstract architectural templates (Reference Architecture) and the specific design of system interactions (Application Architecture), where many candidates confuse the broad scope of reference models with the specific details of application interfaces.

Application architecture is the correct domain for reviewing technology relationships, interfaces, and data flows. While reference architecture provides templates, application architecture specifically addresses the interaction and data exchange between systems.

Selecting Reference Architecture (C) is a common error because it sounds comprehensive, but it actually refers to abstract templates rather than the specific review of actual data interfaces and system relationships.

Community Discussion (3 comments)

RS66 👍 1 Selected: A
A. Application architecture Data flow, interfaces and relationships are all part of the application architecture.
Swallows 👍 1 Selected: C
In this scenario, when an IS auditor is tasked with reviewing an organization's technology relationships, interfaces, and data, the most appropriate enterprise architecture (EA) area for this review would be the Reference Architecture (option C). Reference architecture provides a standardized way of representing and organizing an organization's technology landscape, including its relationships, interfaces, and data flows. It serves as a blueprint or guideline for designing and implementing technology solutions within the organization. Therefore, reviewing the reference architecture would provide the IS auditor with insights into how technology components interact, exchange data, and interface with each other within the organization's IT environment.
Sibsankar 👍 1
D is indeed relevant, it primarily addresses the security aspects of the organization's technology relationships, interfaces, and data. However, the question seems to emphasize a broader scope, including not only security but also the overall structure, interactions, and flows of technology within the organization.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

Application architecture focuses specifically on the design of individual applications and their interactions. It explicitly defines how applications communicate (interfaces), how data flows between them, and their structural relationships, making it the precise area for the requested review.

Why the Other Options Are Wrong

Infrastructure architecture deals with hardware and network components rather than application-level logic or data interfaces. Reference architecture is a generic blueprint or template for future builds, not a review of existing specific data relationships. Information security architecture focuses solely on protection controls, not the functional relationships and data flow.

Community Comment Notes

There is a significant vote split between A and C. Comment 1 correctly identifies that data flow and interfaces belong to Application Architecture. Comment 2 incorrectly assumes Reference Architecture covers the specific landscape review, whereas it is more about standardization patterns and abstract models.

Exam Strategy

Focus on the specific keywords 'interfaces' and 'data' to identify Application Architecture. Avoid choosing 'Reference' or 'Infrastructure' unless the question asks about hardware standards or abstract blueprints.

Related Analysis

Which of the following should be responsible for verifying c

A-Grade

An IS auditor evaluating the change management process must

A-Grade

Which of the following BEST enables an organization to ident

S-Grade

Practice All CISA Questions

Access 400 questions with complete answers and detailed explanations.

View Full CISA Practice Test →

← Back to CISA Study Guide