The Open Group TOGAF Enterprise Architecture Part 2 Sample Questions:

1. Please read this scenario prior to answering the question
Your role is that of a consultant to the Lead Enterprise Architect in a multinational automotive manufacturer.
The company has a corporate strategy that focuses on electrification of its portfolio, and it has invested heavily in a new shared car platform to use across all its brands. The company has four manufacturing facilities, one in North America, two in Europe, and one in Asia.
A challenge that the company is facing is to scale up the number of vehicles coming off the production line to meet customer demand, while maintaining quality. There are significant supply chain shortages for electronic components, which are impacting production. In response to this the company has taken on new suppliers and has also taken design and production of the battery pack in-house.
The company has a mature Enterprise Architecture practice. The TOGAF standard is used for developing the process and systems used to design, manufacture, and test the battery pack. The Chief Information Officer and the Chief Operating Officer co-sponsor the Enterprise Architecture program.
As part of putting the new battery pack into production, adjustments to the assembly processes need to be made. A pilot project has been completed at a single location. The Chief Engineer, sponsor of the activity, and the Architecture Board have approved the plan for implementation and migration at each plant.
Draft Architecture Contracts have been developed that detail the work needed to implement and deploy the new processes for each location. The company mixes internal teams with a few third-party contractors at the locations. The Chief Engineer has expressed concern that the deployment will not be consistent and of acceptable quality.
Refer to the scenario
The Lead Enterprise Architect has asked you to review the draft Architecture Contracts and recommend the best approach to address the Chief Engineer's concern.
Based on the TOGAF Standard, which of the following is the best answer?

A) You review the contracts ensuring that they address project objectives, effectiveness metrics,acceptance criteria, and risk management. Third-party contracts must be legally enforceable. Yourecommend a schedule of compliance reviews at key points in the implementation process. Yourecommend that the Architecture Board reviews all deviations from the Architecture Contract andconsiders whether to grant a dispensation to allow the process to be customized for local needs.
B) For changes requested by an internal team, you recommend a memorandum of understandingbetween the Architecture Board and the implementation organization. For contracts issued to third-party contractors, you recommend that it is a fully enforceable legal contract. You recommend thatthe Architecture Board reviews all deviations from the Architecture Contract and considers whether togrant a dispensation to allow the implementation organization to customize the process to meet theirlocal needs.
C) You recommend that the Architecture Contracts be used to manage the architecture governanceprocesses across the locations. You recommend deployment of monitoring tools to assess theperformance of each completed battery pack at each location and develop change requirements ifnecessary. If a deviation from the contract is detected, the Architecture Board should allow theArchitecture Contract to be modified meet the local needs. In such cases they should issue a newRequest for Architecture Work to implement a modification to the Architecture Definition.
D) For changes undertaken by internal teams, you recommend a memorandum of understandingbetween the Architecture Board and the implementation organization. If a contract is issued to acontractor, you recommend that it is a fully enforceable legal contract. If a deviation from theArchitecture Contract is found, you recommend that the Architecture Board grant a dispensation toallow the implementation organization to customize the process to meet their local needs.

2. Scenario:
You are working as an Enterprise Architect within an Enterprise Architecture (EA) team at an electric vehicle manufacturer. The company produces electric cars and battery systems. The goal of the company is to build the best technology and software platform for electric vehicles.
The company has decided to introduce a major change to its vehicle design over a five-year period. This will be a cross-functional effort between hardware and software teams, delivering significant new features in the vehicles they manufacture. It is planned to be developed in phases.
An architecture to support strategy has been completed with a roadmap for a set of projects.
The EA team has inherited the architecture for the hardware and software automotive platform used by current vehicles, some of which can be carried over to the new vehicle design. The EA team has started to define which parts of the architecture to carry forward.
The presentation and access to different variations of data that the company plans to offer through its vehicles creates an architecture challenge. The application portfolio and supportinginfrastructure must connect with multiple cloud services and data repositories in different countries to be able to handle large-scale data.
Enough of the Business Architecture has been defined, so that work can commence on the Information Systems and Technology Architectures. These architectures need to be defined to support the primary business services that the company plans to provide. These services will manage and process the data created by vehicles, paving the way for self-driving vehicles in the future.
The company uses the TOGAF Standard as the basis for its Enterprise Architecture framework.
The EA team reports to the Chief Technical Officer (CTO), who is the sponsor of the EA program.
The CTO requires that the EA team follow the purpose-based EA Capability model as described in:
The TOGAF Series Guide: A Practitioners' Approach to Developing Enterprise Architecture Following the TOGAF ADM.
Refer to the scenario:
You have been asked how to decide and organize the work to deliver the requested architectures.
Based on the TOGAF standard, which of the following is the best answer?

A) You commence an iteration of ADM Phase A, identifying the stakeholders and revising the Architecture Vision. You perform a Stakeholder Analysis and update the Stakeholder Map created for the strategic architecture so it reflects the stakeholders who are now the most important to the projects that are to be developed. You then request the CTO to make some choices about the Architecture Roadmap and update the Implementation and Migration Plan to reflect the choices.
B) You look outside the company to study how other companies organize their data models and application portfolios. You request just enough architecture description for the Application, Data, and Technology Architectures to identify different options. For each project, this includesidentifying architecture and solution building blocks. You then identify solution providers and perform a readiness assessment on the new approaches.
C) You research leading data companies, using your findings to help in developing high-level Target Data, Application, and Technology Architectures. You review the Architecture Vision to determine the level of detail, time, and scope of the ADM cycle phases required for architecture development for the project. You identify and estimate the cost of the main work packages. You then create an Architecture Roadmap and request the Architecture Board to approve the roadmap. You then start the project.
D) You look to the superior architecture to help plan your approach. You identify projects, dependencies, and synergies, then decide the order for starting the projects. You then develop high-level architecture descriptions. For each project, you determine how much work is needed, identify reference architectures, and candidate building blocks. You identify the resource needs taking into account cost and value. You document the different options, risks, and ways to control them to enable feasibility analysis and trade-offs with the stakeholders.

3. Please read this scenario prior to answering the question
You have been appointed as Chief Enterprise Architect (CEA). reporting to the Chief Technical Officer (CTO), of a company established as a separate operating entity by a major automotive manufacturer. The mission of the company is to build a new industry leading unified technology and software platform for electric vehicles.
The company uses the TOGAF Standard as the basis for its Enterprise Architecture (EA) framework, and architecture development follows the purpose-based EA Capability model as described in the TOGAF Series Guide: A Practitioners'Approach to Developing Enterprise Architecture Following the TOGAF ADM.
An end-to-end Target Architecture has been completed with a roadmap for change over a five-year period. The new platform will be a cross-functional effort between hardware and software teams, with significant changes over the old platform. It is expected to be developed in several stages over three years. The EA team has inherited the architecture for the previous generation hardware and software automotive platform, some of which can be carried over to the new unified platform. The EA team has started to define the new platform, including defining which parts of the architecture to carry forward.
Enough of the Business Architecture has been defined, so that work can commence on the Information Systems and Technology Architectures. Those need to be defined to support the core business services that the company plans to provide. The core services will feature an innovative approach with swarm data generated by vehicles, paving the way for autonomous driving in the future.
The presentation and access to different variations of data that the company plans to offer through its platform pose an architecture challenge. The application portfolio and supporting infrastructure need to interact with various existing cloud services and data- Refer to the scenario You have been asked what approach should be taken to determine and organize the work to deliver the requested architectures?
Based on the TOGAF standard which of the following is the best answer?

A) You will revisit ADM Phase A. identifying the stakeholders and creating a new Architecture Vision. You will update the Stakeholder map produced for the strategic architecture so it reflects the stakeholders who are now the most relevant to the projects that are to be developed. You would then ask the CTO to make some decisions about the Architecture Roadmap, and update the Implementation and Migration Plan to reflect the decisions.
B) You would look outside the enterprise to research data models and application portfolios of leading big data businesses. You would develop just enough applications, data, and technology architecture to identify options. For each project this should include identification of candidate architecture and solution building blocks. You will identify solution providers, perform a readiness assessment, and assess the viability and fitness of the solution options. You will then document the draft Implementation and Migration plan.
C) You will research leading data businesses, developing high-level Target Data, Application and Technology Architectures. You would review the Architecture Vision in order to estimate the level of detail, time, and breadth of the ADM cycle phases that will be needed to develop the architecture. You will identify and cost major work packages, and then develop an Architecture Roadmap. You would then seek approval by the Architecture Board and initiate the project.
D) You would refer to the end-to-end Target Architecture for guidance and direction. The first objective should be to identify projects, dependencies and synergies, then prioritize before initiating the projects. You will develop high-level architecture descriptions. For each project you would estimate effort size, identify reference architectures, and candidate building blocks. You will identify the resource needs considering cost and value. You will document options, risks, and controls to enable viability analysis and trade-off with the stakeholders.

4. Scenario
Your role is that of an Enterprise Architect, reporting to the Chief Enterprise Architect, at a technology company.
The company uses the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice. The Chief Technology Officer (CTO) is the sponsor of the activity. The EA practice uses an iterative approach for its architecture development. This has enabled the decision-makers to gain valuable insights into the different aspects of the business.
The nature of the business is such that the data and the information stored on the company systems is the company's major asset and is highly confidential. The company employees travel a lot for work and need to communicate over public infrastructure. They use message encryption, secure internet connections using Virtual Private Networks (VPNs), and other standard security measures. The company has provided computer security awareness training for all its staff. However, despite good education and system security, there is still a need to rely on third-party suppliers for infrastructure and software.
The Chief Security Officer (CSO) has noted an increase in ransomware (malicious software used in ransom demands) attacks on companies with a similar profile. The CSO recognizes that no matter how much is spent on education and support, the company could be a victim of a significant attack that could completely lock them out of their important data.
A risk assessment has been completed, and the company has looked for cyber insurance that covers ransomware. The price for this insurance is very high. The CTO recently saw a survey that said 1 out of 4 businesses that paid ransoms could not get their data back, and almost thesame number were able to recover the data without paying. The CTO has decided not to get cyber insurance to cover ransom payment.
You have been asked to describe the steps you would take to strengthen the current architecture to improve data protection.
Based on the TOGAF standard, which of the following is the best answer?

A) You would monitor for technology updates from your existing suppliers that could enhance the company's capabilities to detect, react, and recover from an IT security incident. You would prepare and run a disaster recovery planning exercise for a ransomware attack and analyze the performance of the current Enterprise Architecture. Using the findings, you would prepare a gap analysis of the current Enterprise Architecture. You would prepare change requests to address identified gaps. You would add the changes implemented to the Architecture Repository.
B) You would ensure that the company has in place up-to-date processes for managing change to the current Enterprise Architecture. Based on the scope of the concerns raised, you recommend that this be managed at the infrastructure level. Changes should be made to the baseline description of the Technology Architecture. The changes should be approved by the Architecture Board and implemented by change management techniques.
C) You would assess business continuity requirements and analyze the current Enterprise Architecture for gaps. You would recommend changes to address the situation and create a change request. You would engage the Architecture Board to assess and approve the change request. Once approved, you would create a new Request for Architecture Work to begin an ADM cycle to implement the changes.
D) You would request an Architecture Compliance Review with the scope to examine the company's ability to respond to ransomware attacks. You would identify the departments involved and have them nominate representatives. You would then tailor checklists to address the requirement for increased resilience. You would circulate to the nominated representatives for them to complete. You would then review the completed checklists, identifying and resolving issues. You would then determine and present your recommendations.

Solutions: