The Open Group TOGAF Enterprise Architecture Part 2 : OGEA-102

Please read this scenario prior to answering the question
Your role is that of a senior architect, reporting to the Chief Enterprise Architect, at a medium-sized company with 400 employees. The nature of the business is such that the data and the information stored on the company systems is their major asset and is highly confidential.
The company employees travel extensively for work and must communicate over public infrastructure using message encryption, VPNs, and other standard safeguards. The company has invested in cybersecurity awareness training for all its staff. However, it is recognized that even with good education as well as system security, there is a dependency on third-parly suppliers of infrastructure and software.
The company uses the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice. The CTO is the sponsor of the activity.
The Chief Security Officer (CSO) has noted an increase in ransomware (malicious software used in ransom demands) attacks on companies with a similar profile. The CSO recognizes that no matter how much is spent on education, and support, it is likely just a matter of time before the company suffers a significant attack that could completely lock them out of their information assets.
A risk assessment has been done and the company has sought cyber insurance that includes ransomware coverage. The quotation for this insurance is hugely expensive. The CTO has recently read a survey that stated that one in four organizations paying ransoms were still unable to recover their data, while nearly as many were able to recover the data without paying a ransom. The CTO has concluded that taking out cyber insurance in case they need to pay a ransom is not an option.
Refer to the scenario
You have been asked to describe the steps you would take to improve the resilience of the current architecture?
Based on the TOGAF standard which of the following is the best answer?

• A. You would determine business continuity requirements, and undertake a gap analysis of the current Enterprise Architecture. You would make recommendations for change requirements to address the situation and create a change request. You would manage a meeting of the Architecture Board to assess and approve the change request. Once approved you would produce a new Request for Architecture Work to activate an ADM cycle to carry out a project to define the change.
• B. You would monitor for technology changes from your existing suppliers that could improve resilience.
  You would prepare and run a disaster recovery planning exercise for a ransomware attack and analyze the performance of the current Enterprise Architecture. Using the findings, you would prepare a gap analysis of the current Enterprise Architecture. You would prepare change requests to address identified gaps. You would add the changes implemented to the Architecture Repository.
• C. You would ensure that the company has in place up-to-date processes for managing change to the current Enterprise Architecture. Based on the scope of the concerns raised you recommend that this be managed at the infrastructure level. Changes should be made to the baseline description of the Technology Architecture. The changes should be approved by the Architecture Board and implemented by change management techniques.
• D. You would request an Architecture Compliance Review with the scope to examine the company ' s resilience to ransomware attacks. You would identify the departments involved and have them nominate representatives. You would then tailor checklists to address the requirement for increased resilience. You would circulate to the nominated representatives for them to complete. You would then review the completed checklists, identifying and resolving issues. You would then determine and present your recommendations.

Scenario
You are working as an Enterprise Architect within an Enterprise Architecture (EA) team at a global company that sells consumer products. The company produces many products that buyers use and enjoy.
The company has announced a major change to its products that will occur over a four-year period. This change includes the introduction of digital products and services. An architecture to support this strategy has been finished, along with a roadmap for a set of projects to implement this significant change. This will be a cross-functional effort between the product design and software teams. It is planned to be developed in phases.
The company faces a challenge in presenting and providing access to different services through its products and digital platforms while ensuring compliance with data privacy laws. In some countries and regions, the data residency requirements mean that the company has to store certain data within the region where it is collected. As a result, the company's application portfolio and infrastructure must connect with various cloud services and data repositories in different countries.
The EA team has inherited the architecture used by the current products, some of which can be carried over to the new products. The EA team has started to define which parts of the architecture to carry forward. Enough of the Business Architecture has been defined so that work can commence on the Information Systems and Technology Architectures. Those architectures need to be defined to support the key digital services that the company plans to provide.
The company uses the TOGAF Standard as the foundation for its Enterprise Architecture framework, and architecture development follows the purpose-based EA Capability model outlined in the TOGAF Series Guide: A Practitioner's Approach to Developing Enterprise Architecture Following the TOGAF ADM. The EA team reports to the Chief Information Officer (CIO), who oversees the program.
You have been asked how to decide and organize the work to deliver the requested architectures.
Based on the TOGAF standard, which of the following is the best answer?

• A. You refer to the superior architecture for guidance. You review the projects identified, their dependencies, and synergies, then decide the sequence for starting the projects. You develop high-level architecture descriptions. For each project, you determine how much work is needed, identify reference architectures, and candidate building blocks. You identify the resource needs taking into account cost and value. You document the different options, risks, and ways to control them to enable feasibility analysis and trade-off with the stakeholders.
• B. You commence an iteration of ADM Phase A, identifying the stakeholders and revising the Architecture Vision. You perform a Stakeholder Analysis and update the Stakeholder Map. You conduct workshops and interviews to reflect the stakeholders who are now the key drivers for the digital products and services. You coordinate with the CIO to ensure alignment with the overall roadmap and update the Implementation and Migration Plan accordingly.
• C. You research leading data companies, using your findings to help in developing high-level Target Data, Application, and Technology Architectures. You review the Architecture Vision to determine the level of detail, time, and scope of the ADM cycle phases required for each project. You identify and estimate the cost of the main resources. You then prepare an Architecture Roadmap and request the Architecture Board to review the roadmap. You then start the project.
• D. You look outside the company to study how other companies organize their data models and application portfolios. You create just enough architecture description for the Application, Data, and Technology Architectures to identify the different options. For each project, this includes identification of candidate architecture and solution building blocks. You then identify solution providers, perform a readiness assessment, and assess the viability and fitness of the solution options. You then write the draft Implementation and Migration plan.

Please read this scenario prior to answering the question
You are working as an Enterprise Architect at a large supermarket. The company runs many retail stores, as well as an online grocery shop. Many of the stores used to remain open 24/7, but the number has decreased in recent years. Instead, they now focus on fulfilling online orders during the night.
The company has a mature Enterprise Architecture (EA) practice and uses the TOGAF standard for its architecture development method. The EA practice is involved in all aspects of the business, with oversight provided by an Architecture Board with representatives from different parts of the business. The EA program is sponsored by the Chief Information Officer (CIO).
Each store uses a standard method to track sales and inventory. This involves sending accurate timely sales data to a central Al-based inventory management system that can predict demand, adjust stock levels and automate reordering. The central inventory management system is housed at the company ' s central data center.
The company has bought a major rival. The Chief Executive Officer believes that a merger will enable growth through combined offerings and cost savings. The decision has been taken to fully integrate the two organizations, including merging retail operations and systems. This means that duplicated systems will be replaced with one standard retail management system. Also, the company will reduce the number of applications that are used. The CIO expects significant savings will be achieved by implementing these changes across the newly merged company.
One improvement that the rival has successfully implemented is the use of hand-held devices within stores, for both customers and staff. This has increased both customer and staff employee satisfaction due to the time savings this has brought. The CIO has given the go-ahead to roll out the devices in all stores but has stated that training on how to use the hand-held devices should be brief because there are a lot of employees, many of whom are part-time.
The Request for Architecture Work to oversee the merger has been approved. The project has been scoped and you have been assigned to work on it. Your role includes managing the architecture for the retail stores.
Refer to the scenario
You have been asked to confirm the most relevant architecture principles for the transformation.
Based on the TOGAF Standard, which of the following is the best answer?
[Note: The sequence of the principles listed in each answer does not matter. You should assume the company follows the set of principles that are provided in the TOGAF Standard, ADM Techniques, Architecture Principles chapter. You may need to refer to section 2.6 located in ADM Techniques within the reference text to answer this question.]

• A. Common Vocabulary and Data Definitions, Compliance with the Law, Requirements Based Change, Responsive Change Management, Data Security
• B. Maximize Benefit to the Enterprise, Common Use Applications, Data is an Asset, Responsive Change Management, Technology Independence
• C. Common Use Applications, Data is an Asset, Data is Accessible, Ease of Use, Business Continuity
• D. Control Technical Diversity, Interoperability, Data is an Asset, Data is Shared, Business Continuity

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect in a team at a large company. The company sells luxury food and drinks in more than 10,000 stores worldwide. The company is a leader in using technology to connect with its customers. This includes online ordering, mobile apps, and rewards programs. The company is also famous for bringing new ideas to the market, like ordering through apps, using Al to suggest personalized options, self-service pickup stations, and changing prices based on demand.
The stores are open every day. They send timely sales data to a central system that manages inventory. This system can predict what products are needed, adjust how much stock there is, and order more stock automatically. The stores and the main inventory system work directly with the mobile apps, allowing orders to be made online. The central inventory system is located at the company ' s main data center.
The company will merge with a major competitor. This competitor has a synergistic business. Leaders from both companies have told shareholders that the merger will happen fast. There will be minimal impact for customers. All stores will keep the current brand names. They will combine their systems, choosing the best ones to use.
This means their store management and back-office systems will become one. They will stop using duplicate systems and use one main system to manage the stores.
They will also cut down on the number of back-office applications they use.
The Request for Architecture Work to oversee the merger has been approved.
Stakeholders, concerns, and business requirements have been identified. The stakeholders have made it clear that they expect to continue to be able to innovate quickly, and that changes should not restrict that capability. The scope of what is inside and what is outside the architecture efforts has been confirmed. The next step is to revisit and review the Architecture Principles, as they form part of the constraints on architecture work.
Business Continuity is essential given that the business depends on real-time ordering and automated inventory management. During the systems integration, maintaining service for customers and inventory operations must be prioritized Refer to the scenario You have been asked to identify the most relevant Architecture Principles for the merger besides Business Continuity.
Based on the TOGAF standard, which of the following is the best answer?
[Note: You should assume that the company follows the example set of Architecture Principles provided in the TOGAF standard, ADM Techniques, Architecture Principles chapter.]

• A. Control Technical Diversity will help by standardizing technology platforms aspart of the integration process. This will be vital for standardizing the appintegration for digital orders with the back-office systems, and will reducecomplexity and costs during integration. Data Trustee will establish owners tomanage the shared data across the company, thereby assuring data quality.Ease-of-Use is needed to make sure that new user interfaces for the appscontinue to be easy to use.
• B. Primacy of Principles will make sure that the same principles apply to bothorganizations of the newly merged operation, creating consistency acrosslocations. Data as an Asset is critical. Since you ' re maintaining separate mobileapps but consolidating back-end systems, treating data as an asset becomesessential. This principle helps ensure that customer data, and inventoryinformation from both brands are properly integrated and managed.Technology Independence is important when consolidating the back-officeapplications and order processing systems.
• C. Service orientation will speed up the merger and make it easier to integratesystems while maintaining business operations. Maximize Benefit to theEnterprise will make sure that merger decisions prioritize the overall benefit tothe combined company. Common Use Applications across the mergedcompany is preferred over the use of similar or duplicative applications forcertain parts of the company. This help supports the goal of merging back-office systems to reduce duplication.
• D. Compliance with the Law makes sure that all company activities comply withrelevant laws and regulations. This principle provides the foundation forensuring the merger meets all legal requirements.
  Requirements-BasedChange will make sure that when combining systems, changes to applicationsand technology are only made if required by business needs. ResponsiveChange Management focuses on the speed needed to achieve the goals setby the leaders for a quick merger. We are committed to quickly blending thecompanies as planned.

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect at a technology company, reporting directly to the Chief Enterprise Architect. The company supplies personnel and delivers cloud- based solutions to numerous government agencies.
The nature of the business is such that the data and the information stored on the company systems is the company ' s major asset and is highly confidential. The company employees work remotely and need constant access to the company systems, which is done by the public infrastructure. They use message encryption, secure internet connections using Virtual Private Networks (VPNs), and other standard security measures. The company provides computer security awareness training for all its staff.
The Chief Security Officer (CSO) has noted an increase in distributed denial of service (DDoS) attacks on companies with a similar profile. The CSO understands that even with thorough preparation, a major attack could stop employees from being able to do their jobs. This could lead to a large financial loss, damage to the company ' s reputation with customers, and employees being unable to work.
A risk assessment has been completed and the company has looked for cyber insurance that covers such attacks. The price for this insurance is very high. The CTO has decided not to get cyber insurance to cover such attacks.
The company follows the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice. The Chief Technology Officer (CTO) is the sponsor of the activity. The practice uses an iterative approach for its architecture development.
This has enabled the decision makers to gain valuable insights into the different aspects of the business Please read this scenario prior to answering the question You have been asked to describe the steps you would take to strengthen the current architecture to improve data protection.
Based on the TOGAF standard which of the following is the best answer?

• A. You would ensure that business value and cost of continuity measures areunderstood by key stakeholders, and that the company has in place up-to-dateprocesses for managing change to the current Enterprise Architecture. Yourecommend that DDoS mitigation be addressed at the infrastructure level toensure effective, scalable protection. Changes should be made to the baselinedescription of the Technology Architecture. The changes should be approvedby the Architecture Board and implemented by change managementtechniques.
• B. You would hold an Architecture Compliance Review with the scope to examinethe company ' s ability to respond to such attacks. You would identify thedepartments involved and have them nominate representatives. You wouldthen tailor checklists to address the requirement for increased businesscontinuity and resilience. You would circulate the checklists to the nominatedrepresentatives for them to complete. You would review the completedchecklists, identifying and resolving issues. You would then determine andpresent your recommendations to the Architecture Board.
• C. You would run a planning exercise to assess the business continuityrequirements and analyze the current Enterprise Architecture for gaps. Youcreate a formal change request related to business resilience and maintainingcritical business functions. You would arrange a meeting of the ArchitectureBoard to assess and approve the change request. Once approved you wouldcreate a new Request for Architecture Work to begin an ADM cycle toimplement the changes.
• D. You would request technology updates from existing suppliers that improve thecompany ' s capabilities to detect, react, and recover from an incident. Youwould run a simulated ransomware attack to evaluate the current EnterpriseArchitecture ' s resilience and recovery capabilities. Using the findings, youwould perform a gap analysis of the current Enterprise Architecture, andprepare change requests to address identified gaps. You would document thechanges implemented and add to the Architecture Repository.