Certified Information Systems Auditor (CISA) — Question 979

An IS auditor is asked to review an organization's technology relationships, interfaces, and data. Which of the following enterprise architecture (EA) areas is MOST appropriate for this review?

Answer options

• A. Application architecture
• B. Infrastructure architecture
• C. Reference architecture
• D. Information security architecture

Correct answer: A

Explanation

The correct answer is A, Application architecture, as it focuses on the software applications and their interactions, which is essential for reviewing technology relationships. Options B, C, and D pertain to different aspects of enterprise architecture that do not directly address the review of technology interfaces and data.