Objective 4.7: Given a requirement specification detailing security and flexibility needs, identify architectures that would fulfill those requirements

Architectures

A modular architecture is the most flexible but may suffer manageability issues. Security is required at all levels and a modular architecture supports this.
EJB security is flexible and it is declarative so can be adjusted as required without recompiling.
See also sections Common architectures and Security