The Open Group OGEA-102 : TOGAF Enterprise Architecture Part 2 Exam

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect working within the Enterprise Architecture (EA) team at an electric vehicle manufacturer. The company focuses on designing, manufacturing, and advancing battery technology for sustainable transportation. The goal of the company is to build the best technology and software platform to support self-driving cars.
An architecture to support strategy has been completed defining a long-term Target Architecture with a roadmap over five years. This has identified the need for a portfolio of projects over the next two years. The portfolio includes development of an advanced driver assistance system using data gathered from multiple vehicles on the road.
The design of the presentation and accessibility of different types of data that the company plans to offer through its platform is challenging. It is important for the application portfolio to work securely with third- party cloud services, and V2X (Vehicle-to-Everything) service providers across many countries in order to effectively manage large amounts of data. Stakeholders are particularly concerned about the security of V2X.
Regulations in various markets mandate that user privacy must always be safeguarded, to prevent tracking and compiling of data that could reveal the drivers ' journey.
The company follows the TOGAF standard as the basis for its Enterprise Architecture practice and uses the purpose-based EA Capability model as described in the TOGAF Series Guide: A Practitioners ' Approach to Developing Enterprise Architecture Following the TOGAF ADM. The EA team reports to the Chief Information Officer (CIO), who is the sponsor of the EA program.
You have been assigned to lead the architecture development effort for the driver assistance system. A security resource plan and a vision for a security-specific architecture design have been completed. You have a meeting with the EA team leader to talk about the progress of your work.
Refer to the scenario
You have been asked how you will address risk and security at this stage of the architecture project.
Based on the TOGAF standard which of the following is the best answer?

• A. A trust framework should be established with the third parties required for the travel assistance systems.
  This will describe the relationship with each party and establish the foundation for secure cloud operations. Digital certificates should be a key part of the framework and will be used to create trust between the parties. Regular monitoring for legal and regulatory changes across all the countries should occur to keep the trust framework in compliance.
• B. A qualitative risk assessment should be carried out for the data assets exchanged with the service providers. This will deliver a set of priorities, high to medium to low, based on identified threats, the likelihood of occurrence, and the impact. Using the priorities, a Business Risk Model can then be developed detailing the risk strategy including classifications to determine what mitigation is sufficient.This model can then used to determine the risk strategy for the company.
• C. Since data is being shared across multiple service providers, a security federation should be established.
  This includes contractual arrangements, and a definition of the responsibility areas for the data exchanged, as well as security implications. Assets with the same security criteria should be grouped together so they can be managed under one security policy. A risk assessment should be carried out to determine the risks relevant to specific data assets.
• D. Data quality is a key factor in risk management. The datasets that need to be safeguarded should be identified. For each dataset, ownership and responsibility for the quality of data should be assigned. A security classification will be defined and applied to each dataset. The dataset owner will then be able to authorize processes that are trusted for a certain activity on the dataset under specific circumstances.

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect at a healthcare company. The company operates over 250 hospitals and is dedicated to transforming healthcare with new ideas and advancements. The company has multiple divisions include surgery centers, freestanding emergency departments, urgent care clinics, and physician practices. They also develop and supply a range of products and services, many with specialized systems and clinical needs.
The company's Enterprise Architecture (EA) department has been operating for several years and has mature, well-developed architecture governance and development processes following the TOGAF standard. The Chief Information Officer (CIO) is the sponsor of the Enterprise Architecture program.
Healthcare is a highly controlled sector, and the company must maintain robust security practices to keep patient information private and prevent data breaches. The company shares electronic health records with multiple providers and has standardized its medical coding for billing and reporting.
Many of the company's rivals have begun using Artificial Intelligence (Al) in their operations, and the indications are that this will be transformative for healthcare delivery. This is something the EA department has been interested in for a while, and they had recently submitted an architecture Change Request which was approved. As a result, the CIO has approved a Request for Architecture Work to implement Al-based solutions in the company.
The project has been established and you have been assigned to work on it. Stakeholders, concerns, and business requirements have been identified. The stakeholders have made it clear that timely implementation of changes can be life-critical, and that changes should be focused on improving patient outcomes. They also have a concern about disruption due to the changes and require the systems to preserve clinical data access and maintain critical life-support systems during any outages.
The scope of what is inside and what is outside the architecture efforts has now been confirmed. Your task is to revisit and review the Architecture Principles, as they form part of the constraints on architecture work.
Refer to the scenario
The EA team leader has asked you to explain which Architecture Principles are most relevant for this project.
Based on the TOGAF standard, which of the following is the best answer?
[Note: You should assume the company follows the example set of Architecture Principles that are provided in the TOGAF standard, ADM Techniques, Architecture Principles chapter.]

• A. Compliance with the Law is critical for a company operating in one of the most heavily regulated industries. This principle provides the foundation for ensuring the initiative meets all legal requirements for patient data handling. Interoperability ensuring systems can exchange and use information is important for cross-provider data sharing. Control Technical Diversity will be vital for standardizing the Al implementations across multiple divisions that share electronic health records with standardized medical coding.
• B. Responsive Change Management emphasizes implementing changes in a timely manner to meet user needs and limiting downtime during change. Primacy of Principles makes it clear that the set of principles applies equally to all divisions and clinical departments. This will ensure that the regulatory requirements across the company are met. Maximize Benefit to the Enterprise will ensure that decisions are made to provide maximum benefit to the company.
• C. Common Vocabulary and Data Definitions is essential for standardized medical coding and cross- provider data sharing. This ensures the solutions will properly interpret clinical data consistently across divisions. Data Security is critical to protect patient information aligned with the regulations. It ensures data integrity and system availability for critical care. Requirements-Based Change ensures changes respond to business and clinical needs, supporting changes being driven by clinical requirements.
• D. Common Use Applications promotes standardization across divisions for the solutions, aligning with the company's existing practice of standardized medical coding. Information Management is Everybody ' s Business is relevant because clinical staff, administrative personnel, and IT teams all need to collaborate on information management decisions. Data is Accessible is highly relevant to the healthcare industry. This is needed for users to perform their functions and leads to efficiency and effectiveness.

Please read this scenario prior to answering the question
You are serving as the Lead Architect for an Enterprise Architecture team within a leading multinational biotechnology company. The company works in three major industries, including healthcare, crop production, and agriculture. Your team works within the healthcare division.
The healthcare division is developing a new vaccine, and has to demonstrate its effectiveness and safety in a set of clinical trials that satisfy the regulatory requirements of the relevant health authorities. The clinical trials are undertaken by its research laboratories at multiple facilities worldwide. In addition to internal research and development activities, the healthcare division is also involved in publicly funded collaborative research projects with industrial and academic partners.
The Enterprise Architecture team has been engaged in an architecture project to develop a secure system that will allow the healthcare researchers to share information more easily about their clinical trials, and work more collaboratively across the organization and also with its partners. This system will also connect with external partners.
The Enterprise Architecture team uses the TOGAF ADM with extensions required to support healthcare manufacturing practices and laboratory practices. Due to the highly sensitive nature of the information that is managed, special care has been taken to ensure that each architecture domain considers the security and privacy issues that are relevant.
The Vice President for Worldwide Clinical Research is the sponsor of the Enterprise Architecture activity.
She has stated that disruptions must be minimized for the clinical trials, and that the rollout must be undertaken incrementally.
Refer to the scenario
You have been asked to recommend the approach to identify the work packages for an incremental rollout meeting the requirements.
Based on the TOGAF standard which of the following is the best answer?

• A. You recommend that the Solution Building Blocks from a Consolidated Gaps, Solutions and Dependencies Matrix be grouped into a set of work packages. Using the matrix as a planning tool, regroup the work packages to account for dependencies. Sequence the work packages into the Capability Increments needed to achieve the Target Architecture, so that the implementation team can schedule the rollout one region at a time to minimize disruption. Document the work packages for the Enterprise Architecture using a Transition Architecture State Evolution Table.
• B. You recommend that the set of required Solution Building Blocks be determined by identifying those which need to be developed and which need to be procured. Eliminate any duplicates. Group the remaining Solution Building Blocks together to create the work packages using a CRUD (create, read, update, delete) matrix. Rank the work packages and select the most cost-effective options for inclusion in a series of Transition Architectures. Schedule the roll out of the work packages to be sequential across the geographic regions.
• C. You recommend that a Consolidated Gaps. Solutions and Dependencies Matrix is used as a planning tool for creating work packages. For each gap classify whether the solution is either a new development, purchased solution, or based on an existing product. Group the similar solutions together to define the work packages. Regroup the work packages into a set of Capability Increments to transition to the Target Architecture considering the schedule for clinical trials, and document in an Architecture Definition Increments Table.
• D. You recommend that an Implementation Factor Catalog is drawn up to indicate actions and constraints.
  A Consolidated Gaps. Solutions and Dependencies Matrix should also be created. For each gap.
  identify a proposed solution and classify it as new development, purchased solution, or based on an existing product. Group similar activities together to form work packages. Identify dependencies between work packages factoring in the clinical trial schedules. Regroup the work packages into a set of Capability Increments scheduled into a series of Transition Architectures.

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect for a company that is an international supplier of manufacturing systems.
The company has multiple manufacturing plants where it assembles both standard and customized products for industrial production automation. Each of these plants has been operating its own planning and production scheduling systems, as well as applications and control systems that drive the automated production line. The current systems work with the local partners in the supply chain at each plant.
The company has been facing competition in the marketplace and its leadership has been considering how to improve production efficiency. A favored proposal is to replace many of the systems with a centralized system communicating with the manufacturing plants. The CIO has asked the EA team to develop an architecture for this approach that supports both standardized and customized production across multiple manufacturing plants, while maintaining enterprise-wide integration and governance.
The company has an Enterprise Architecture (EA) practice and uses the TOGAF standard as the basis for its work. It has been running for many years and has established governance and development processes for EA.
The Chief Information Officer (CIO) sponsors the Enterprise Architecture program. You are part of an Enterprise Architecture (EA) team that has responsibilities across the company.
As a supplier of manufacturing systems with multiple plants, there are many interested parties that will need to be satisfied.
The Architecture Board has approved the Request for Architecture Work to find out if such an architecture transformation would lead to efficiency improvements.
Refer to the scenario
You have been assigned to lead this project and asked to outline your next steps.
Based on the TOGAF standard, which of the following is the best answer?

• A. You would run a proof-of-concept project to allow your suppliers to demonstrate candidate off-the- shelf solutions that address the concerns of the stakeholders. After looking at the results of the project, you would select the most efficient solution and use that to set the requirements. Once the re quirements are complete, there should be a formal stakeholder review, and permission requested to move forward to develop the Target Architecture.
• B. You would run multiple workshops at the manufacturing plants to discover and document business requirements. This would also help you understand the location-specific problems and identify the actors and roles at each location. You would create a matrix of stakeholders to identify key people involved and their concerns. You would then determine and record the main stakeholder requirements for the architecture. Finally, you would create clear high-level descriptions of the current and future architectures.
• C. You would create high level views of the baseline and target Architectures for each manufacturing plant, and then a set of views corresponding to selected viewpoints to address key concerns of the stakeholders. The gap analysis results for the architectures should be reviewed and consolidated into a single list. A set of work packages should be identified. A formal stakeholder review should be held to obtain approval before moving to the Target Architecture phase.
• D. You would conduct a series of workshops with the local partners to gather requirements from them.
  Based on the findings from the workshops, you would define a preliminary Architecture Vision including summary views, high-level requirements, and high-level definitions of the baseline and target environments from a business, information systems, and technology perspective. You would then use the Architecture Vision to build agreement among the local partners.

You are working as an Enterprise Architect within an Enterprise Architecture (EA) team at a multinational energy company. The company is committed to becoming a net-zero emissions energy business by 2050. To achieve this, the company is focusing on shifting to renewable energy production and adopting eco-friendly practices.
The EA team, which reports to the Chief Technical Officer (CTO), has been tasked with overseeing the transformation to make the company more effective through acquisitions. The company plans to fully integrate these acquisitions, including merging operations and systems.
To address the integration challenges, the EA team leader wants to know how to manage risks and ensure that the company succeeds with the proposed changes. Based on the TOGAF Standard, which of the following is the best answer?

• A. The EA team should document the risks associated with the transformation in an Implementation Factor Catalog to inform decisions during implementation and deployment.
• B. The EA team should create a Business Scenario to fully describe the business problem that is being addressed by the transformation. Once requirements are identified, they should be evaluated in terms of risks. Any residual risks should be escalated to the Architecture Board.
• C. The EA team should evaluate the company's readiness for change by identifying factors that will impact the transformation. These factors will be used to determine initial risks associated with the initiative.
• D. The EA team should develop Business Architecture views that demonstrate how stakeholder concerns are addressed and assess each factor for readiness, urgency, and degree of difficulty.