Scenario
Your role is that of an Enterprise Architect, reporting to the Chief Enterprise Architect, at a technology company.
The company uses the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice. The Chief Technology Officer (CTO) is the sponsor of the activity. The EA practice uses an iterative approach for its architecture development. This has enabled the decision-makers to gain valuable insights into the different aspects of the business.
The nature of the business is such that the data and the information stored on the company systems is the company's major asset and is highly confidential. The company employees travel a lot for work and need to communicate over public infrastructure. They use message encryption, secure internet connections using Virtual Private Networks (VPNs), and other standard security measures. The company has provided computer security awareness training for all its staff. However, despite good education and system security, there is still a need to rely on third-party suppliers for infrastructure and software.
The Chief Security Officer (CSO) has noted an increase in ransomware (malicious software used in ransom demands) attacks on companies with a similar profile. The CSO recognizes that no matter how much is spent on education and support, the company could be a victim of a significant attack that could completely lock them out of their important data.
A risk assessment has been completed, and the company has looked for cyber insurance that covers ransomware. The price for this insurance is very high. The CTO recently saw a survey that said 1 out of 4 businesses that paid ransoms could not get their data back, and almost thesame number were able to recover the data without paying. The CTO has decided not to get cyber insurance to cover ransom payment.
You have been asked to describe the steps you would take to strengthen the current architecture to improve data protection.
Based on the TOGAF standard, which of the following is the best answer?

• A. You would monitor for technology updates from your existing suppliers that could enhance the company's capabilities to detect, react, and recover from an IT security incident. You would prepare and run a disaster recovery planning exercise for a ransomware attack and analyze the performance of the current Enterprise Architecture. Using the findings, you would prepare a gap analysis of the current Enterprise Architecture. You would prepare change requests to address identified gaps. You would add the changes implemented to the Architecture Repository.
• B. You would request an Architecture Compliance Review with the scope to examine the company's ability to respond to ransomware attacks. You would identify the departments involved and have them nominate representatives. You would then tailor checklists to address the requirement for increased resilience. You would circulate to the nominated representatives for them to complete. You would then review the completed checklists, identifying and resolving issues. You would then determine and present your recommendations.
• C. You would assess business continuity requirements and analyze the current Enterprise Architecture for gaps. You would recommend changes to address the situation and create a change request. You would engage the Architecture Board to assess and approve the change request. Once approved, you would create a new Request for Architecture Work to begin an ADM cycle to implement the changes.
• D. You would ensure that the company has in place up-to-date processes for managing change to the current Enterprise Architecture. Based on the scope of the concerns raised, you recommend that this be managed at the infrastructure level. Changes should be made to the baseline description of the Technology Architecture. The changes should be approved by the Architecture Board and implemented by change management techniques.

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect for a company that is an international supplier of manufacturing systems.
The company has multiple manufacturing plants where it assembles both standard and customized products for industrial production automation. Each of these plants has been operating its own planning and production scheduling systems, as well as applications and control systems that drive the automated production line. The current systems work with the local partners in the supply chain at each plant.
The company has been facing competition in the marketplace and its leadership has been considering how to improve production efficiency. A favored proposal is to replace many of the systems with a centralized system communicating with the manufacturing plants. The CIO has asked the EA team to develop an architecture for this approach that supports both standardized and customized production across multiple manufacturing plants, while maintaining enterprise-wide integration and governance.
The company has an Enterprise Architecture (EA) practice and uses the TOGAF standard as the basis for its work. It has been running for many years and has established governance and development processes for EA.
The Chief Information Officer (CIO) sponsors the Enterprise Architecture program. You are part of an Enterprise Architecture (EA) team that has responsibilities across the company.
As a supplier of manufacturing systems with multiple plants, there are many interested parties that will need to be satisfied.
The Architecture Board has approved the Request for Architecture Work to find out if such an architecture transformation would lead to efficiency improvements.
Refer to the scenario
You have been assigned to lead this project and asked to outline your next steps.
Based on the TOGAF standard, which of the following is the best answer?

• A. You would conduct a series of workshops with the local partners to gather requirements from them.
  Based on the findings from the workshops, you would define a preliminary Architecture Vision including summary views, high-level requirements, and high-level definitions of the baseline and target environments from a business, information systems, and technology perspective. You would then use the Architecture Vision to build agreement among the local partners.
• B. You would run a proof-of-concept project to allow your suppliers to demonstrate candidate off-the- shelf solutions that address the concerns of the stakeholders. After looking at the results of the project, you would select the most efficient solution and use that to set the requirements. Once the re quirements are complete, there should be a formal stakeholder review, and permission requested to move forward to develop the Target Architecture.
• C. You would run multiple workshops at the manufacturing plants to discover and document business requirements. This would also help you understand the location-specific problems and identify the actors and roles at each location. You would create a matrix of stakeholders to identify key people involved and their concerns. You would then determine and record the main stakeholder requirements for the architecture. Finally, you would create clear high-level descriptions of the current and future architectures.
• D. You would create high level views of the baseline and target Architectures for each manufacturing plant, and then a set of views corresponding to selected viewpoints to address key concerns of the stakeholders. The gap analysis results for the architectures should be reviewed and consolidated into a single list. A set of work packages should be identified. A formal stakeholder review should be held to obtain approval before moving to the Target Architecture phase.

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect at a large technology company with diverse business lines. The company has multiple divisions, engaged in mobile, e-commerce, cloud computing services, and a social network.
The company has an established Enterprise Architecture (EA) practice based on the TOGAF standard, including the TOGAF ADM. The EA program is sponsored by the Chief Information Officer (CIO). The use of EA has enabled the company to gain valuable insights into different parts of the business. One of the primary goals in the EA program charter is to coordinate efforts between the teams in each division. This has made sure that the mobile, e-commerce, cloud, and social media initiatives remain aligned with business strategy.
The practice has an established Architecture Capability and uses iteration for architecture development. The iterative approach is well-suited for modern digital transformation initiatives, where the company must adapt quickly to new business and market challenges. In addition to the EA program, the company uses several management frameworks, including business planning, project/portfolio management, and operations management.
The company is growing rapidly. A consequence of this rapid growth has been the proliferation of multiple IT solutions, with architecture giving way to growth. The company appears to be failing to architect its growth.
Several systems have proved unreliable with some major outages, including the e-commerce system being offline for eight hours at the start of the holiday sales period, as well as the cloud computing services outage, which took down several popular websites. The service management organization within the company has blamed the outages on misalignment of the IT solutions.
The Governing Board has raised concerns about the outages. As a consequence, the CEO has asked for better reporting and management of the IT portfolio. The task has been assigned to the EAteam, with a constraint to maintain business as usual.
Refer to the Scenario
You have been asked to assess the IT solutions to determine where problems are occurring and where change is needed.
Based on the TOGAF standard, which of the following is the best answer?

• A. The team should evaluate the IT resources across the company against the operational performance data and business needs. This will include a review of availability and responsiveness. You would assess the current applications and technology infrastructure by commencing an iteration cycle following a baseline first architecture development approach. This would allow you to identify improvement opportunities and allow you to determine where misalignment is occurring.
• B. The team should commence an architecture development cycle through the architecture definition phases (B-D) with the purpose to understand the causes of the outages. This will allow the concerns of the Governing Board to be addressed through each of the Business, Information Systems, and Technology Architecture phases. This will identify the changes in a structured manner and make sure they address the requirements.
• C. The team should start an iteration cycle of target architecture definition. The team will then identify the requirements, drivers, issues, and constraints to support the change. The result will be a more resilient architecture to support definition of a set of IT solutions that will address the misalignment. You would ensure that non-functional requirements are well defined to make sure that the target architecture is robust and reliable.
• D. The team should start an iteration cycle by defining the baseline Technology Architecture first to assess the current infrastructure capacity and capability for the company. There should be an assessment of the operational performance data. This is needed to diagnose the causes of the system outages. The results of the assessment can then be used to identify the required changes to make sure that the misalignments between solutions are removed.

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect in a team at a large company. The company sells luxury food and drinks in more than 10,000 stores worldwide. The company is a leader in using technology to connect with its customers. This includes online ordering, mobile apps, and rewards programs. The company is also famous for bringing new ideas to the market, like ordering through apps, using Al to suggest personalized options, self-service pickup stations, and changing prices based on demand.
The stores are open every day. They send timely sales data to a central system that manages inventory. This system can predict what products are needed, adjust how much stock there is, and order more stock automatically. The stores and the main inventory system work directly with the mobile apps, allowing orders to be made online. The central inventory system is located at the company ' s main data center.
The company will merge with a major competitor. This competitor has a synergistic business. Leaders from both companies have told shareholders that the merger will happen fast. There will be minimal impact for customers. All stores will keep the current brand names. They will combine their systems, choosing the best ones to use.
This means their store management and back-office systems will become one. They will stop using duplicate systems and use one main system to manage the stores.
They will also cut down on the number of back-office applications they use.
The Request for Architecture Work to oversee the merger has been approved.
Stakeholders, concerns, and business requirements have been identified. The stakeholders have made it clear that they expect to continue to be able to innovate quickly, and that changes should not restrict that capability. The scope of what is inside and what is outside the architecture efforts has been confirmed. The next step is to revisit and review the Architecture Principles, as they form part of the constraints on architecture work.
Business Continuity is essential given that the business depends on real-time ordering and automated inventory management. During the systems integration, maintaining service for customers and inventory operations must be prioritized Refer to the scenario You have been asked to identify the most relevant Architecture Principles for the merger besides Business Continuity.
Based on the TOGAF standard, which of the following is the best answer?
[Note: You should assume that the company follows the example set of Architecture Principles provided in the TOGAF standard, ADM Techniques, Architecture Principles chapter.]

• A. Control Technical Diversity will help by standardizing technology platforms aspart of the integration process. This will be vital for standardizing the appintegration for digital orders with the back-office systems, and will reducecomplexity and costs during integration. Data Trustee will establish owners tomanage the shared data across the company, thereby assuring data quality.Ease-of-Use is needed to make sure that new user interfaces for the appscontinue to be easy to use.
• B. Compliance with the Law makes sure that all company activities comply withrelevant laws and regulations. This principle provides the foundation forensuring the merger meets all legal requirements.
  Requirements-BasedChange will make sure that when combining systems, changes to applicationsand technology are only made if required by business needs. ResponsiveChange Management focuses on the speed needed to achieve the goals setby the leaders for a quick merger. We are committed to quickly blending thecompanies as planned.
• C. Primacy of Principles will make sure that the same principles apply to bothorganizations of the newly merged operation, creating consistency acrosslocations. Data as an Asset is critical. Since you ' re maintaining separate mobileapps but consolidating back-end systems, treating data as an asset becomesessential. This principle helps ensure that customer data, and inventoryinformation from both brands are properly integrated and managed.Technology Independence is important when consolidating the back-officeapplications and order processing systems.
• D. Service orientation will speed up the merger and make it easier to integratesystems while maintaining business operations. Maximize Benefit to theEnterprise will make sure that merger decisions prioritize the overall benefit tothe combined company. Common Use Applications across the mergedcompany is preferred over the use of similar or duplicative applications forcertain parts of the company. This help supports the goal of merging back-office systems to reduce duplication.

Scenario:
You are working as an Enterprise Architect within an Enterprise Architecture (EA) team at an electric vehicle manufacturer. The company produces electric cars and battery systems. The goal of the company is to build the best technology and software platform for electric vehicles.
The company has decided to introduce a major change to its vehicle design over a five-year period. This will be a cross-functional effort between hardware and software teams, delivering significant new features in the vehicles they manufacture. It is planned to be developed in phases.
An architecture to support strategy has been completed with a roadmap for a set of projects.
The EA team has inherited the architecture for the hardware and software automotive platform used by current vehicles, some of which can be carried over to the new vehicle design. The EA team has started to define which parts of the architecture to carry forward.
The presentation and access to different variations of data that the company plans to offer through its vehicles creates an architecture challenge. The application portfolio and supportinginfrastructure must connect with multiple cloud services and data repositories in different countries to be able to handle large-scale data.
Enough of the Business Architecture has been defined, so that work can commence on the Information Systems and Technology Architectures. These architectures need to be defined to support the primary business services that the company plans to provide. These services will manage and process the data created by vehicles, paving the way for self-driving vehicles in the future.
The company uses the TOGAF Standard as the basis for its Enterprise Architecture framework.
The EA team reports to the Chief Technical Officer (CTO), who is the sponsor of the EA program.
The CTO requires that the EA team follow the purpose-based EA Capability model as described in:
The TOGAF Series Guide: A Practitioners' Approach to Developing Enterprise Architecture Following the TOGAF ADM.
Refer to the scenario:
You have been asked how to decide and organize the work to deliver the requested architectures.
Based on the TOGAF standard, which of the following is the best answer?

• A. You look outside the company to study how other companies organize their data models and application portfolios. You request just enough architecture description for the Application, Data, and Technology Architectures to identify different options. For each project, this includesidentifying architecture and solution building blocks. You then identify solution providers and perform a readiness assessment on the new approaches.
• B. You commence an iteration of ADM Phase A, identifying the stakeholders and revising the Architecture Vision. You perform a Stakeholder Analysis and update the Stakeholder Map created for the strategic architecture so it reflects the stakeholders who are now the most important to the projects that are to be developed. You then request the CTO to make some choices about the Architecture Roadmap and update the Implementation and Migration Plan to reflect the choices.
• C. You research leading data companies, using your findings to help in developing high-level Target Data, Application, and Technology Architectures. You review the Architecture Vision to determine the level of detail, time, and scope of the ADM cycle phases required for architecture development for the project. You identify and estimate the cost of the main work packages. You then create an Architecture Roadmap and request the Architecture Board to approve the roadmap. You then start the project.
• D. You look to the superior architecture to help plan your approach. You identify projects, dependencies, and synergies, then decide the order for starting the projects. You then develop high-level architecture descriptions. For each project, you determine how much work is needed, identify reference architectures, and candidate building blocks. You identify the resource needs taking into account cost and value. You document the different options, risks, and ways to control them to enable feasibility analysis and trade-offs with the stakeholders.