Scenario
Your role is that of an Enterprise Architect, reporting to the Chief Enterprise Architect, at a technology company.
The company uses the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice. The Chief Technology Officer (CTO) is the sponsor of the activity. The EA practice uses an iterative approach for its architecture development. This has enabled the decision-makers to gain valuable insights into the different aspects of the business.
The nature of the business is such that the data and the information stored on the company systems is the company's major asset and is highly confidential. The company employees travel a lot for work and need to communicate over public infrastructure. They use message encryption, secure internet connections using Virtual Private Networks (VPNs), and other standard security measures. The company has provided computer security awareness training for all its staff. However, despite good education and system security, there is still a need to rely on third-party suppliers for infrastructure and software.
The Chief Security Officer (CSO) has noted an increase in ransomware (malicious software used in ransom demands) attacks on companies with a similar profile. The CSO recognizes that no matter how much is spent on education and support, the company could be a victim of a significant attack that could completely lock them out of their important data.
A risk assessment has been completed, and the company has looked for cyber insurance that covers ransomware. The price for this insurance is very high. The CTO recently saw a survey that said 1 out of 4 businesses that paid ransoms could not get their data back, and almost thesame number were able to recover the data without paying. The CTO has decided not to get cyber insurance to cover ransom payment.
You have been asked to describe the steps you would take to strengthen the current architecture to improve data protection.
Based on the TOGAF standard, which of the following is the best answer?

• A. You would request an Architecture Compliance Review with the scope to examine the company's ability to respond to ransomware attacks. You would identify the departments involved and have them nominate representatives. You would then tailor checklists to address the requirement for increased resilience. You would circulate to the nominated representatives for them to complete. You would then review the completed checklists, identifying and resolving issues. You would then determine and present your recommendations.
• B. You would ensure that the company has in place up-to-date processes for managing change to the current Enterprise Architecture. Based on the scope of the concerns raised, you recommend that this be managed at the infrastructure level. Changes should be made to the baseline description of the Technology Architecture. The changes should be approved by the Architecture Board and implemented by change management techniques.
• C. You would monitor for technology updates from your existing suppliers that could enhance the company's capabilities to detect, react, and recover from an IT security incident. You would prepare and run a disaster recovery planning exercise for a ransomware attack and analyze the performance of the current Enterprise Architecture. Using the findings, you would prepare a gap analysis of the current Enterprise Architecture. You would prepare change requests to address identified gaps. You would add the changes implemented to the Architecture Repository.
• D. You would assess business continuity requirements and analyze the current Enterprise Architecture for gaps. You would recommend changes to address the situation and create a change request. You would engage the Architecture Board to assess and approve the change request. Once approved, you would create a new Request for Architecture Work to begin an ADM cycle to implement the changes.

Please read this scenario prior to answering the question
You are working as an Enterprise Architect within a healthcare and life science company. The company is a leading player in its industry, dedicated to transforming healthcare with new ideas and advancements. The company has multiple divisions that cover different aspects of the business.
The company ' s Enterprise Architecture (EA) department has been operating for several years and has mature, well-developed architecture governance and development processes following the TOGAF Standard. In addition to the EA program, the company has a number of management frameworks in use.
The Architecture Board includes representatives from each division of the company.
Many of the company ' s rivals have begun utilizing Artificial Intelligence (Al) in their operations, and the indications are that this will be transformative for healthcare delivery. This is something the EA department has been interested in for a while, and they had recently submitted an architecture Change Request which was approved. As a result, the CIO has approved a Request for Architecture Work to investigate the implementation of Al in the company.
Areas for evaluation include:
How can staff use Al daily in their current role?
How Al can enhance access to care for patients, and how to make that experience seamless?
How Al can offer new workplace platforms and tools to increase efficiency?
Some of the top managers are worried about a change in the way of working, and if it will achieve the goals.
Many are not confident that the company ' s risk management processes are adequate for a company-wide integration of generative Al. There are also questions from staff about whether enough specific guidelines and polices have been put in place for responsible use of Al.
The Chief Information Officer (CIO) is the sponsor of the Enterprise Architecture program. The CIO has actively encouraged architecting with agility within the EA department as her preferred approach for projects.
The CIO wants to know how to address these concerns and reduce risks.
Refer to the scenario
You have been tasked with starting the architecture development. How do you begin?
Based on the TOGAF standard which of the following is the best answer?

• A. You recommend creation of a set of business models that can be applied uniformly across all Al-related architecture projects. These should be developed in the portable format to ensure maximumportability across the many tools used in the firm. Each architecture should then be defined based onthis fixed set of models. All concerned parties can then examine the models to ensure that theirneeds have been addressed.
• B. You recommend that a Communications Plan be created to address the key stakeholders, that is themost powerful and influential partners. This plan should include a report that summarizes the keyfeatures of the architecture with respect to each location and reflects the stakeholders ' requirements.You will check with each key stakeholder that their concerns are being addressed. Risk mitigationshould be explicitly addressed as a component of the architecture being developed.
• C. You recommend that an analysis of the stakeholders is undertaken. This will allow the architects todefine groups of partners (the stakeholders) who have common concerns and include developmentof a Stakeholder Map. The concerns and relevant views should then be defined for each group andrecorded in the Architecture Vision document. To mitigate risk, you include a requirement that therebe progressive development of the target architecture to ensure there is regular feedback.
• D. You recommend that models be created for the Draft Business, Data, Application, and TechnologyArchitectures. These can be used to ensure that the system will be compliant with the localregulations for each division. Together with the problem description, and requirements, this ensuresthat all the necessary data and detail is addressed. A formal review should be held with thestakeholders to verify that their concerns have been properly addressed by the models.

Please read this scenario prior to answering the question
You are the Lead Enterprise Architect at a major agribusiness company. The company ' s main harvest is lentils, a highly valued food grown worldwide. The lentil parasite, broomrape, has been an increasing concern for many years and is now becoming resistant to chemical controls. In addition, changes in climate favor the propagation and growth of the parasite. As a result, the parasite cannot realistically be exterminated, and it has become pandemic, with lentil yields falling globally.
In response to the situation, the CEO has decided that the lentil fields will be used for another harvest. The company will also cease to process third-party lentils and will repurpose its processing plants. Thus, the target market will change, and the end-products will be different and more varied.
The company has recently established an Enterprise Architecture practice based on the TOGAF standard as method and guiding framework. The CIO is the sponsor of the activity. A formal request for architecture change has been approved. At this stage there is no fixed scope, shared vision, or objectives.
Refer to the scenario
You have been asked to propose the best approach for architecture development to realize the CEO ' s change in direction for the company.
Based on the TOGAF standard which of the following is the best answer?

• A. You propose that this engagement define the baseline Technology Architecture first in order to assess the current infrastructure capacity and capability for the company. Then the focus should be on transition planning and incremental architecture deployment. This will identify requirements to ensure that the projects are sequenced in an optimal fashion so as to realize the change.
• B. You propose that the team focus on architecture definition including development of business models, with emphasis on defining the change parameters to support this new business strategy that the CEO has identified. Once understood, the team will be in the best position to identify the requirements, drivers, issues, and constraints for the change.
• C. You propose that the team uses the architecture definition document and focus on architecture development starting simultaneously phases B, C and D. This is because the CEO has identified the need to change. This will ensure that the change can be defined in a structured manner and address the requirements needed to realize the change.
• D. You propose that the priority is to produce a new Request for Architecture Work leading to development of a new Architecture Vision. The trade-off method should be applied to identify and select an architecture satisfying the stakeholders. For an efficient change the EA team should be aligned with the organization ' s planning, budgeting, operational, and change processes.

Please read this scenario prior to answering the question
You are part of the Enterprise Architecture (EA) team at a company, employed as an Enterprise Architect.
The company creates and sells goods targeted at the consumer market, which are sold to retail organizations worldwide.
The EA team has operated successfully for several years and has well developed processes based on the TOGAF standard. The EA team ' s responsibilities include architecting product development processes and customer experience. The Enterprise Architecture practice at the company is sponsored by the Chief Technology Officer.
The company uses Agile product management techniques and Agile development practices. The EA team works with the product management teams, supporting and enabling the Agile development teams. The company routinely implements architecture and solution sprints that run in parallel, with the EA team developing Minimum Viable Architecture (MVA) deliverables.
The company is starting a digital transformation project where it will expand its offerings from physical products to also Include digital products and digital services. This includes enabling each of its product lines to offer digital products or services associated with their existing physical products.
You have been asked to work on a specific product line, which is experimenting with new direct-to-consumer digital products using a third-party platform. A Minimum Viable Architecture approach was taken for this experiment, including a shallow architecture development iteration with a focus on the Application Architecture, followed by a quick and minimal Implementation.
Customer feedback shows that the direct-to-consumer digital products are missing their revenue targets and are not reaching the target customers. The feedback is also saying that the customers do not find much value in these direct-to-consumer digital products. The product manager is seeking advice on how to tackle these problems, while making sure that the products stay within the guardrails set by the EA team.
Refer to the scenario
How will you gather information to address the missed revenue targets and inability to reach the intended target customers?
Based on the TOGAF standard which of the following is the best answer?

• A. You would start with the baseline Business Architecture and develop new architecture models to address the concerns raised. You use modeling techniques to identify customer segments, determine what is necessary to meet the customer ' s needs, and how to attract the target audience. In addition, including value streams and information maps would help. You would investigate different alternatives that would enhance the value proposition for the target audience.
• B. You would start another iteration of ADM Phases B-C. This would include development of a description in the Architecture Definition Document of how the product architecture needs to operate to achieve the business goals, and how the application will support the needs of the business as well as the customers. The Data Architecture should identify tools for data capture that would help with analysis of the concerns raised.
• C. You would revise the target architecture for ADM Phase B and create new architecture models to address the issues raised. The models should identify different groups of customers, what they find valuable, how much it costs to serve them, and the resulting revenue. You would examine the customer value by using value stream mapping to breakdown the activities for the direct-to-consumer products.
  You would investigate different target Business Architecture alternatives.
• D. You would start with the target Application Architecture, revising it to better align with the overall digital transformation plan. You would write a new Statement of Architecture Work including a detailed project description and a work plan. This should be submitted for review by the EA team leader. Once approved by the EA team leader, you would start a full ADM cycle to gather all the necessary information to address the issues raised.

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect in a team at a large company. The company sells luxury food and drinks in more than 10,000 stores worldwide. The company is a leader in using technology to connect with its customers. This includes online ordering, mobile apps, and rewards programs. The company is also famous for bringing new ideas to the market, like ordering through apps, using Al to suggest personalized options, self-service pickup stations, and changing prices based on demand.
The stores are open every day. They send timely sales data to a central system that manages inventory. This system can predict what products are needed, adjust how much stock there is, and order more stock automatically. The stores and the main inventory system work directly with the mobile apps, allowing orders to be made online. The central inventory system is located at the company ' s main data center.
The company will merge with a major competitor. This competitor has a synergistic business. Leaders from both companies have told shareholders that the merger will happen fast. There will be minimal impact for customers. All stores will keep the current brand names. They will combine their systems, choosing the best ones to use.
This means their store management and back-office systems will become one. They will stop using duplicate systems and use one main system to manage the stores.
They will also cut down on the number of back-office applications they use.
The Request for Architecture Work to oversee the merger has been approved.
Stakeholders, concerns, and business requirements have been identified. The stakeholders have made it clear that they expect to continue to be able to innovate quickly, and that changes should not restrict that capability. The scope of what is inside and what is outside the architecture efforts has been confirmed. The next step is to revisit and review the Architecture Principles, as they form part of the constraints on architecture work.
Business Continuity is essential given that the business depends on real-time ordering and automated inventory management. During the systems integration, maintaining service for customers and inventory operations must be prioritized Refer to the scenario You have been asked to identify the most relevant Architecture Principles for the merger besides Business Continuity.
Based on the TOGAF standard, which of the following is the best answer?
[Note: You should assume that the company follows the example set of Architecture Principles provided in the TOGAF standard, ADM Techniques, Architecture Principles chapter.]

• A. Compliance with the Law makes sure that all company activities comply withrelevant laws and regulations. This principle provides the foundation forensuring the merger meets all legal requirements.
  Requirements-BasedChange will make sure that when combining systems, changes to applicationsand technology are only made if required by business needs. ResponsiveChange Management focuses on the speed needed to achieve the goals setby the leaders for a quick merger. We are committed to quickly blending thecompanies as planned.
• B. Control Technical Diversity will help by standardizing technology platforms aspart of the integration process. This will be vital for standardizing the appintegration for digital orders with the back-office systems, and will reducecomplexity and costs during integration. Data Trustee will establish owners tomanage the shared data across the company, thereby assuring data quality.Ease-of-Use is needed to make sure that new user interfaces for the appscontinue to be easy to use.
• C. Service orientation will speed up the merger and make it easier to integratesystems while maintaining business operations. Maximize Benefit to theEnterprise will make sure that merger decisions prioritize the overall benefit tothe combined company. Common Use Applications across the mergedcompany is preferred over the use of similar or duplicative applications forcertain parts of the company. This help supports the goal of merging back-office systems to reduce duplication.
• D. Primacy of Principles will make sure that the same principles apply to bothorganizations of the newly merged operation, creating consistency acrosslocations. Data as an Asset is critical. Since you ' re maintaining separate mobileapps but consolidating back-end systems, treating data as an asset becomesessential. This principle helps ensure that customer data, and inventoryinformation from both brands are properly integrated and managed.Technology Independence is important when consolidating the back-officeapplications and order processing systems.