Your question is Compare REST and SOAP Security. Take a moment with it on the right.
Talk me through your thinking if you like. When you're confident, submit your answer and I'll grade it like a real screen (7/10 or better passes).
You own an internal integration layer that exposes customer-order and payment-adjacent services to partner systems and mobile apps. Some teams want to standardize on REST, while a legacy vendor integration still depends on SOAP. You have been asked to explain the security and operational differences before the platform team chooses a default pattern.
How would you compare REST and SOAP from a security and infrastructure perspective, and when would you choose one over the other? Focus on the trust boundary, authentication, message protection, and operational failure modes you would expect in each approach.