The Open Group OGEA-102 real exam prep : TOGAF Enterprise Architecture Part 2 Exam

Please read this scenario prior to answering the question
You are the Chief Enterprise Architect at a large food service company specializing in sales to trade and wholesale, for example, restaurants and other food retailers.
One of your company ' s competitors has launched a revolutionary product range and is running a very aggressive marketing campaign. Your company ' s resellers are successively announcing that they are not interested in your company ' s products and will sell your competitor ' s.
The CEO has stated there must be significant change to address the situation. He has made it clear that new markets must be found for the company ' s products, and that the business needs to pivot, and address the retail market as well as the existing wholesale market.
A consideration is the company ' s ability and willingness to change its business model, and if it is a temporary or permanent change. An additional risk factor is one of culture. The company has been used to a stable business with a reasonably well known and settled client base - all with its own local understandings and practices.
The CEO is the sponsor of the EA program within the company. You have been engaged with the sales, logistics, production, and marketing teams, enabling the architecture activity to start. An Architecture Vision, Architecture Principles, and Requirements have all been agreed. As you move forward to develop a possible Target Architecture you have identified that some of the key stakeholders ' preferences are incompatible. The incompatibilities are focused primarily on time-to-market, cost savings, and the need to bring out a fully featured product range, but there are additional factors.
Refer to the scenario
You have been asked how you will address the incompatibilities between key stakeholder preferences.
Based on the TOGAF standard which of the following is the best answer?

• A. You would review the Stakeholder Map and ensure that you have addressed and represented theconcerns of all department heads. You will involve them in resolving the incompatibilities.TheCommunications Plan should include a report that summarizes the key features of the architecturewith and how incompatibilities were resolved to reflects the stakeholders ' requirements.You willcheck with each key stakeholder they are satisfied with how the incompatibilities have been resolved.
• B. You recommend that since the CEO has stated that the company must pivot, it is better tocompromise on a full product range rather than time-to-market. You would develop just enough of theTarget Architecture to demonstrate fitness of the proposed approach. You would limit the descriptionto just where there is a gap between the current baseline. You would seek approval by thestakeholders to move forward with developing the Target Architecture in detail.
• C. You would seek to understand value preferences and priorities of the stakeholders. You woulddevelop alternative Target Architectures, highlighting the gaps between current state and thealternatives. You would consider combining features from one or more alternatives in collaborationwith the stakeholders.
  A formal stakeholder review should then be held to decide which alternative isfit for purpose and should be moved forward with. You will then secure the funding required.
• D. You would use the Architecture Vision, Principles, and Requirements to define a set of criteria foralternatives and create a set of architecture views to illustrate the impact of the alternative TargetArchitectures. You would identify the impact on planned projects. You would understand the strengthsand weaknesses of the alternatives. You would conduct a formal stakeholder review to decide whichalternative to move forward with. You will determine the funding required.

Please read this scenario prior to answering the question
You have been appointed as senior architect working for an autonomous driving technology development company. The mission of the company is to build an industry leading unified technology and software platform to support connected cars and autonomous driving.
The company uses the TOGAF Standard as the basis for its Enterprise Architecture (EA) framework.
Architecture development within the company follows the purpose-based EA Capability model as described in the TOGAF Series Guide: A Practitioners ' Approach to Developing Enterprise Architecture Following the TOGAF ADM.
An architecture to support strategy has been completed defining a long-range Target Architecture with a roadmap spanning five years. This has identified the need for a portfolio of projects over the next two years.
The portfolio includes development of travel assistance systems using swarm data from vehicles on the road.
The current phase of architecture development is focused on the Business Architecture which needs to support the core travel assistance services that the company plans to provide. The core services will manage and process the swarm data generated by vehicles, paving the way for autonomous driving in the future.
The presentation and access to different variations of data that the company plans to offer through its platform poses an architecture challenge. The application portfolio needs to interact securely with various third-party cloud services, and V2X (Vehicle-to-Everything) service providers in many countries to be able to manage the data at scale. The security of V2X is a key concern for the stakeholders. Regulators have stated that the user ' s privacy be always protected, for example, so that the drivers ' journey cannot be tracked or reconstructed by compiling data sent or received by the car.
Refer to the scenario
You have been asked to describe the risk and security considerations you would include in the current phase of the architecture development?
Based on the TOGAF standard which of the following is the best answer?

• A. You will perform a qualitative risk assessment for the data assets exchanged with partners. This will deliver a set of priorities, high to medium to low, based on identified threats, the likelihood of occurrence, and the impact if it did occur. Using the priorities, you would then develop a Business Risk Model which will detail the risk strategy including classifications to determine what mitigation is enough.
• B. You will focus on data quality as it is a key factor in risk management. You will identify the datasets that need to be safeguarded. For each dataset, you will assign ownership and responsibility for the quality of data needs. A security classification will be defined and applied to each dataset. The dataset owner will then be able to authorize processes that are trusted for a certain activity on the dataset under certain circumstances.
• C. You will create a security domain model so that assets with the same level can be managed under one security policy. Since data is being shared across partners, you will establish a security federation to include them. This would include contractual arrangements, and a definition of the responsibility areas for the data exchanged, as well as security implications. You would undertake a risk assessment determining risks relevant to specific data assets.
• D. You will focus on the relationship with the third parties required for the travel assistance systems and define a trust framework. This will describe the relationship with each party. Digital certificates are a key part of the framework and will be used to create trust between parties. You will monitor legal and regulatory changes across all the countries to keep the trust framework in compliance.

You are working as an Enterprise Architect within the Enterprise Architecture (EA) team at a healthcare and life sciences company. The EA team is developing a secure system for researchers to share clinical trial information easily across the organization and with external partners.
Due to the highly sensitive nature of the information, each architecture domain must consider privacy and safety concerns. The healthcare division has been directed to minimize disruptions to clinical trials while introducing the new system gradually.
How would you identify the work packages for introducing the new system? Based on the TOGAF standard, which of the following is the best answer?

• A. Use a Consolidated Gaps, Solutions, and Dependencies Matrix to classify each solution, group them into work packages, then regroup into Capability Increments. Document in an Architecture Definition Increments Table.
• B. Draw up an Implementation Factor Catalog to indicate actions and constraints. Use a Consolidated Gaps, Solutions, and Dependencies Matrix, then group similar activities into work packages and identify dependencies.
• C. Identify Solution Building Blocks for development or procurement, then use a CRUD matrix to rank and select the most cost-effective work packages. Schedule the rollout sequentially across regions.
• D. Use a Consolidated Gaps, Solutions, and Dependencies Matrix to create work packages and sequence them into Capability Increments. Document in a Transition Architecture State Evolution Table.

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect at a technology company, reporting directly to the Chief Enterprise Architect. The company supplies personnel and delivers cloud- based solutions to numerous government agencies.
The nature of the business is such that the data and the information stored on the company systems is the company ' s major asset and is highly confidential. The company employees work remotely and need constant access to the company systems, which is done by the public infrastructure. They use message encryption, secure internet connections using Virtual Private Networks (VPNs), and other standard security measures. The company provides computer security awareness training for all its staff.
The Chief Security Officer (CSO) has noted an increase in distributed denial of service (DDoS) attacks on companies with a similar profile. The CSO understands that even with thorough preparation, a major attack could stop employees from being able to do their jobs. This could lead to a large financial loss, damage to the company ' s reputation with customers, and employees being unable to work.
A risk assessment has been completed and the company has looked for cyber insurance that covers such attacks. The price for this insurance is very high. The CTO has decided not to get cyber insurance to cover such attacks.
The company follows the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice. The Chief Technology Officer (CTO) is the sponsor of the activity. The practice uses an iterative approach for its architecture development.
This has enabled the decision makers to gain valuable insights into the different aspects of the business Please read this scenario prior to answering the question You have been asked to describe the steps you would take to strengthen the current architecture to improve data protection.
Based on the TOGAF standard which of the following is the best answer?

• A. You would ensure that business value and cost of continuity measures areunderstood by key stakeholders, and that the company has in place up-to-dateprocesses for managing change to the current Enterprise Architecture. Yourecommend that DDoS mitigation be addressed at the infrastructure level toensure effective, scalable protection. Changes should be made to the baselinedescription of the Technology Architecture. The changes should be approvedby the Architecture Board and implemented by change managementtechniques.
• B. You would run a planning exercise to assess the business continuityrequirements and analyze the current Enterprise Architecture for gaps. Youcreate a formal change request related to business resilience and maintainingcritical business functions. You would arrange a meeting of the ArchitectureBoard to assess and approve the change request. Once approved you wouldcreate a new Request for Architecture Work to begin an ADM cycle toimplement the changes.
• C. You would request technology updates from existing suppliers that improve thecompany ' s capabilities to detect, react, and recover from an incident. Youwould run a simulated ransomware attack to evaluate the current EnterpriseArchitecture ' s resilience and recovery capabilities. Using the findings, youwould perform a gap analysis of the current Enterprise Architecture, andprepare change requests to address identified gaps. You would document thechanges implemented and add to the Architecture Repository.
• D. You would hold an Architecture Compliance Review with the scope to examinethe company ' s ability to respond to such attacks. You would identify thedepartments involved and have them nominate representatives. You wouldthen tailor checklists to address the requirement for increased businesscontinuity and resilience. You would circulate the checklists to the nominatedrepresentatives for them to complete. You would review the completedchecklists, identifying and resolving issues. You would then determine andpresent your recommendations to the Architecture Board.

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect within a clinical research and health technologies company. The company is dedicated to transforming healthcare with new ideas and advancements. The company has multiple divisions that cover different aspects of the business.
The company ' s Enterprise Architecture (EA) department has mature, well-developed architecture governance and development processes following the TOGAF standard.
In addition to the EA program, the company has a number of management
frameworks in use. The Architecture Board includes representatives from each division of the company. The Chief Information Officer (CIO) is the sponsor of the Enterprise Architecture program. The CIO has actively encouraged architecting with agility within the EA department as the preferred approach for projects.
Many of the company ' s rivals have begun using Artificial Intelligence (Al) in their operations, and the indications are that this will be transformative for healthcare delivery. This is something the EA department has been interested in for a while, and they had recently submitted an architecture Change Request which was approved. As a result, the CIO has approved a Request for Architecture Work to investigate the implementation of Al in the company.
Areas for evaluation include:
How can staff use Al daily in their current roles?
How can Al enhance access to care for patients, and how to make that experience seamless?
How can Al offer new workplace platforms and tools to increase efficiency?
Some of the top managers are worried about a change in the way of working, and if it will achieve the goals. Many are not confident that the company ' s risk management processes are adequate for a company-wide integration of generative Al. There are also questions from staff about whether enough specific guidelines and polices have been put in place for responsible use of Al.
Refer to the scenario
You have been assigned to the architecture development and asked how to address the concerns and manage risk for the project. How do you begin?
Based on the TOGAF standard which of the following is the best answer?

• A. You recommend that an analysis of the stakeholders is carried out. This willallow the architects to define groups of stakeholders who have commonconcerns and include development of a Stakeholder Map. The concerns andrelevant views should then be defined for each group and recorded in theArchitecture Vision document. To mitigate risk, you include a requirement thatthere be progressive development of the target architecture to ensure there isregular feedback.
• B. You recommend that models be created for the Draft Business, Data,Application, and Technology Architectures. These can be used to minimize risk,and make sure that the system meets the local regulations for each division.Together with the problem description, and requirements, these should beincluded in the Architecture Vision document. A formal review should be heldwith the stakeholders to verify that their concerns are included in theArchitecture Vision.
• C. You recommend creation of a simple solution concept diagram to show howthe stakeholders will be impacted, and the benefits to the firm. You would alsocreate a benefits diagram showing the various opportunities from adoption ofAl-based solutions. A meeting should be held with the main stakeholders toreview the diagrams. They can then decide the priorities and sequencingdecisions for the architecture development. Risk will be evaluated whendefining the Architecture Roadmap.
• D. You recommend that all the stakeholders be identified, and a CommunicationsPlan created to address the most powerful and influential stakeholders. Thisplan should include a report that summarizes the key features of thearchitecture with respect to each division and reflects the stakeholders ' requirements.
  You will check with each key stakeholder that their concerns arebeing addressed. Risk mitigation should be explicitly addressed as acomponent of the architecture being developed.