Please read this scenario prior to answering the question
You are working as Chief Enterprise Architect at a large Internet company. The company has many divisions, ranging from cloud to logistics. The company has grown rapidly, expanding from initially selling physical books and media to a range of services including an online marketplace, live-streaming. eBooks. and cloud services.
Overall management of the numerous divisions has become challenging. Recent high-profile projects have overrun on budget and under delivered, damaging the company ' s reputation, and adversely impacting its share price. There is a widely held view within the executive management that the organization structure has played a major role in these project failures.
The company has an established Enterprise Architecture program based on the TOGAF standard, sponsored jointly by the Chief Executive Officer (CEO) and Chief Information Officer (CIO). The CEO has decided that the company needs to reorganize its divisions around artificial intelligence and machine learning with a focus on automation. The CEO has worked with the Enterprise Architects to create a strategic architecture for the reorganization, including an Architecture Vision, together with definitions for the four domain architectures.
This sets out an ambitious vision of the future of the company over a three-year period. This includes a set of work packages and includes three distinct transformations.
The CIO has made it clear that prior to the approval of the detailed Implementation and Migration plan, the EAteam will need to assess the risks associated with the proposed architecture. He has received concerns from key stakeholders across the company that the proposed reorganization may be too ambitious and there is doubt whether it can produce sufficient value to warrant the risks.
Refer to the scenario
You have been asked to recommend an approach to satisfy these concerns. Based on the TOGAF Standard, which of the following is the best answer?

• A. The Enterprise Architects should bring together information about potential approaches and produce several alternative target transition architectures. They should then investigate the different architecture alternatives and discuss these with stakeholders using the Architecture Alternatives and Trade-offs technique. Once the target architecture has been selected, it should be analyzed using a state evolution table to determine the Transition Architectures. A value realization process should then be established to ensure that the concerns raised are addressed.
• B. Before preparing the detailed Implementation and Migration plan, the EnterpriseArchitects should review and consolidate the gap analysis results from Phases B toThis will identify the transformations required to achieve the proposed TargetArchitecture. The Enterprise Architects should then assess the readiness of theorganization to undergo change and determine an overall direction to address andmitigate risks identified. The Transition Architecture should then be planned to use astate evolution table.
• C. The Enterprise Architects should evaluate the organization ' s readiness to undergo change. This will allow the risks associated with the transformations to be identified, classified, and mitigated for. This should include identifying dependencies between the set of changes, including gaps and work packages.
  It will also identify improvement actions to be worked into the Implementation and Migration Plan. The business value, effort, and risk associated for each transformation should be determined.
• D. Establishing interoperability in alignment with the corporate operating model will ensure risks are minimized. The Enterprise Architects should apply an interoperability analysis to evaluate any potential issues across the architecture. This should include the development of a matrix showing the interoperability requirements. These can then be included within the transformation strategy embedded in the target transition architectures. The Enterprise Architects should then finalize the Architecture Roadmap and the Implementation and Migration Plan.

You are working as an Enterprise Architect within an Enterprise Architecture (EA) team at a large government agency with multiple divisions. The agency has a well-established EA practice and follows the TOGAF standard as its method for architecture development. The government has mandated that the agency prepare for an " AI-first " world.
The agency wants to determine the impact and role of AI in its future services. The CIO has approved a Request for Architecture Work to explore the use of AI in services. Some leaders are concerned about reliance on AI, security, and employees' need to acquire new skills.
The EA team leader seeks suggestions on managing the risks associated with a new architecture for the AI- first project. Based on the TOGAF standard, which of the following is the best answer?

• A. Conduct an analysis of stakeholders, documenting their concerns and recording them in the Architecture Vision document. Risks should be recorded in the Architecture Requirements Specification and reviewed regularly.
• B. Identify key stakeholders and develop a Communication Plan that addresses their needs. Ensure the architecture addresses risk management and summarizes features of the architecture.
• C. Separate stakeholders into groups and categorize them. Develop models for each group and verify that their concerns are addressed in Phase G, Implementation Governance.
• D. Create an organization map to show the links between different agency parts. Hold a meeting to teach stakeholders to interpret the models. Manage risks as part of Security Architecture development.

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect working at a vehicle manufacturing company. The company specializes in buses and coaches. You are part of an Enterprise Architecture (EA) team that has responsibilities across multiple divisions of the company. EA provides the company with a comprehensive framework to develop and manage their manufacturing infrastructure, processes for component production, and design and testing systems.
The company has a corporate strategy that focuses on switching to electric power for its vehicles. It has invested heavily in a new standardized design, production efforts, and major components to use across all its product range. The company has multiple manufacturing plants in North America, Europe, and in Asia.
Customer demand has caused a backlog of orders because many customers want to have more environmentally friendly public transportation. There are not enough electronic components available, which is making it hard to produce products and meet customer demand. To address this issue, the company has started making the battery packs themselves and has hired new suppliers.
The EA team is working on a project to improve the process and systems to design, produce, and test the battery pack. As part of putting the new battery pack into production, changes to the assembly processes need to be made. A trial has been completed at a single location. The Chief Engineer, sponsor of the project, and the Architecture Board have approved the plan to roll out these changes to all plants.
Preliminary Architecture Contracts are being developed to detail the work needed to put in place the new processes for each location. The EA team leader has called a meeting to discuss the contracts. It is emphasized that the Architecture Contract will serve as the key connection between architecture and implementation organizations.
The company mixes internal teams with a few third-party contractors at the locations.
The Chief Engineer is worried that the implementation and deployment will not be consistent and of satisfactory quality.
The company has an established EA practice. It uses the TOGAF standard as the foundation for its work including the internal EA framework. Additionally, the company uses various management frameworks such as business planning, project management, and operations management.
Refer to the scenario
The EA team leader asks you how you would address the Chief Engineer ' s concern.
Based on the TOGAF standard, which of the following is the best answer?

• A. The contracts must be used to manage the architecture governance processesacross the locations.Monitoring tools must be put in place to assess theperformance of each completed battery pack at each location. If a deviationfrom the contract is needed, the Architecture Board should allow theArchitecture Contract to be modified for the location. In such cases they shouldissue a new Request for Architecture Work to implement a modification to theArchitecture Definition.
• B. The contracts must be checked to ensure they have flexibility. For changesundertaken by internal teams, a memorandum of understanding between theArchitecture Board and the implementation organization is needed. If acontract is issued to a contractor, it must be a fully enforceable legal contract. Ifa deviation from the Architecture Contract is found, the Architecture Boardmust grant a dispensation to allow the implementation organization tocustomize the process to meet their local needs.
• C. The contracts must specify goals, measures, acceptance terms, and risks.Third-party contracts must be legally enforceable. It is advisable to establish aschedule of compliance reviews at key points in the implementation process.The Architecture Board must review all deviations from the ArchitectureContract and consider whether to grant a dispensation to allow the process tobe customized for local needs. Ensure that all dispensations are time-boundrather than indefinite.
• D. The contracts must be checked to ensure they can be used to direct andcontrol the implementation teams. For contracts issued to third-partycontractors, they must be enforceable legal contracts. For internaldevelopment teams, a memorandum of understanding with the ArchitectureBoard is needed.
  The Architecture Board must review all deviations from theArchitecture Contract and decide whether to grant a dispensation to allow theimplementation organization to customize the process to meet their localneeds.

You are employed as an Enterprise Architect within an Enterprise Architecture (EA) team at an environmental agency. The agency has multiple divisions, and is responsible for overseeing environmental protection, regulation, and conservation efforts.
The agency has a well-established EA practice and follows the TOGAF standard as its method for architecture development. Along with the EA program, the agency also uses various management frameworks, including business planning, project/portfolio management, and operations management. The EA program is sponsored by the Chief Information Officer (CIO), who has actively promoted architecting with agility within the EA department as the preferred approach for projects.
The agency is preparing itself for a world where Artificial Intelligence (Al) is widely adopted. As a result, the agency is looking to determine the impact and role that Al will play moving forward.
The CIO has approved a Request for Architecture Work to look at how Al can be used for services across the agency. She has noted that digital platforms will be a priority for investment in order to scale the planned Al applications. Using Al to automate tasks and make things run smoother is seen as a big advantage. Process automation, and improved efficiency from manual, repetitive activities has been identified as the key benefits of applying generative Al to their agency ' s business. This will include back-office automation, for example, for help center agents who receive hundreds of email enquiries. This should also improve services for their customers by making them more efficient and personalized, tailored to each individual's needs.
Many of the agency leaders are worried about relying too much on Al. Some leaders think their employees will need to learn new skills. Some employees are worried they might lose their jobs to Al. Other leaders worry about security and cyber resilience in the digital platforms needed for Al to be successful.
Refer to the scenario
The EA team leader has asked how to address the concerns, and how to manage the risks of a new architecture for the project.
Based on the TOGAF standard which of the following is the best answer?

• A. You recommend creating an Organization Map to display the links between different parts of the agency. This will help the EA team to find and involve all areas of the agency impacted by this strategic change. Multiple business models should then be created that can be applied to Al related projects. A meeting will be held with the stakeholders to teach them how to interpret the models and see how their concerns are being addressed. Risk will be managed as part of the Security Architecture development.
• B. You recommend that the key stakeholders be formally identified. This should include those who will be most helpful for the change to be successful. A Communication Plan should be made to address their needs. This plan should include a report that summarizes the key features of the architecture based on stakeholder requirements and addressing concerns. You meet with each key stakeholder to make sure their concerns are being addressed. You make sure that the architecture being developed clearly addresses risk management.
• C. You recommend an assessment of the power, influence, and interest of key individuals affected by the project. This includes documenting the positions, concerns, issues, and cultural factors of each interest group. This information will shape how the architecture is presented and explained. The concerns and relevant views can be defined for each group and recorded in the Architecture Vision document. The requirements for addressing risk should be recorded in the Architecture Requirements Specification and checked through regular assessments and feedback.
• D. You recommend conducting an analysis that separates the different types of stakeholders into groups.
  They can be put into categories including corporate functions, end-user organization, project organization, systems, and external. Models should be developed for each stakeholder category to ensure that that all the necessary information and details are considered. A meeting should be held with the stakeholders to verify that their concerns have been addressed. Risk management will be considered during the Implementation Governance phase.

Scenario
Your role is that of an Enterprise Architect, reporting to the Chief Enterprise Architect, at a technology company.
The company uses the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice. The Chief Technology Officer (CTO) is the sponsor of the activity. The EA practice uses an iterative approach for its architecture development. This has enabled the decision-makers to gain valuable insights into the different aspects of the business.
The nature of the business is such that the data and the information stored on the company systems is the company's major asset and is highly confidential. The company employees travel a lot for work and need to communicate over public infrastructure. They use message encryption, secure internet connections using Virtual Private Networks (VPNs), and other standard security measures. The company has provided computer security awareness training for all its staff. However, despite good education and system security, there is still a need to rely on third-party suppliers for infrastructure and software.
The Chief Security Officer (CSO) has noted an increase in ransomware (malicious software used in ransom demands) attacks on companies with a similar profile. The CSO recognizes that no matter how much is spent on education and support, the company could be a victim of a significant attack that could completely lock them out of their important data.
A risk assessment has been completed, and the company has looked for cyber insurance that covers ransomware. The price for this insurance is very high. The CTO recently saw a survey that said 1 out of 4 businesses that paid ransoms could not get their data back, and almost thesame number were able to recover the data without paying. The CTO has decided not to get cyber insurance to cover ransom payment.
You have been asked to describe the steps you would take to strengthen the current architecture to improve data protection.
Based on the TOGAF standard, which of the following is the best answer?

• A. You would request an Architecture Compliance Review with the scope to examine the company's ability to respond to ransomware attacks. You would identify the departments involved and have them nominate representatives. You would then tailor checklists to address the requirement for increased resilience. You would circulate to the nominated representatives for them to complete. You would then review the completed checklists, identifying and resolving issues. You would then determine and present your recommendations.
• B. You would assess business continuity requirements and analyze the current Enterprise Architecture for gaps. You would recommend changes to address the situation and create a change request. You would engage the Architecture Board to assess and approve the change request. Once approved, you would create a new Request for Architecture Work to begin an ADM cycle to implement the changes.
• C. You would ensure that the company has in place up-to-date processes for managing change to the current Enterprise Architecture. Based on the scope of the concerns raised, you recommend that this be managed at the infrastructure level. Changes should be made to the baseline description of the Technology Architecture. The changes should be approved by the Architecture Board and implemented by change management techniques.
• D. You would monitor for technology updates from your existing suppliers that could enhance the company's capabilities to detect, react, and recover from an IT security incident. You would prepare and run a disaster recovery planning exercise for a ransomware attack and analyze the performance of the current Enterprise Architecture. Using the findings, you would prepare a gap analysis of the current Enterprise Architecture. You would prepare change requests to address identified gaps. You would add the changes implemented to the Architecture Repository.