The Open Group OGEA-102 Exam Overview:

The Open Group OGEA-102 Exam Syllabus Topics:

The Open Group TOGAF Enterprise Architecture Part 2 Sample Questions:

1. Please read this scenario prior to answering the question
Your role is that of a senior architect, reporting to the Chief Enterprise Architect, at a medium-sized company with 400 employees. The nature of the business is such that the data and the information stored on the company systems is their major asset and is highly confidential.
The company employees travel extensively for work and must communicate over public infrastructure using message encryption, VPNs, and other standard safeguards. The company has invested in cybersecurity awareness training for all its staff. However, it is recognized that even with good education as well as system security, there is a dependency on third-parly suppliers of infrastructure and software.
The company uses the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice. The CTO is the sponsor of the activity.
The Chief Security Officer (CSO) has noted an increase in ransomware (malicious software used in ransom demands) attacks on companies with a similar profile. The CSO recognizes that no matter how much is spent on education, and support, it is likely just a matter of time before the company suffers a significant attack that could completely lock them out of their information assets.
A risk assessment has been done and the company has sought cyber insurance that includes ransomware coverage. The quotation for this insurance is hugely expensive. The CTO has recently read a survey that stated that one in four organizations paying ransoms were still unable to recover their data, while nearly as many were able to recover the data without paying a ransom. The CTO has concluded that taking out cyber insurance in case they need to pay a ransom is not an option.
Refer to the scenario
You have been asked to describe the steps you would take to improve the resilience of the current architecture?
Based on the TOGAF standard which of the following is the best answer?

A) You would request an Architecture Compliance Review with the scope to examine the company ' s resilience to ransomware attacks. You would identify the departments involved and have them nominate representatives. You would then tailor checklists to address the requirement for increased resilience. You would circulate to the nominated representatives for them to complete. You would then review the completed checklists, identifying and resolving issues. You would then determine and present your recommendations.
B) You would ensure that the company has in place up-to-date processes for managing change to the current Enterprise Architecture. Based on the scope of the concerns raised you recommend that this be managed at the infrastructure level. Changes should be made to the baseline description of the Technology Architecture. The changes should be approved by the Architecture Board and implemented by change management techniques.
C) You would determine business continuity requirements, and undertake a gap analysis of the current Enterprise Architecture. You would make recommendations for change requirements to address the situation and create a change request. You would manage a meeting of the Architecture Board to assess and approve the change request. Once approved you would produce a new Request for Architecture Work to activate an ADM cycle to carry out a project to define the change.
D) You would monitor for technology changes from your existing suppliers that could improve resilience.
You would prepare and run a disaster recovery planning exercise for a ransomware attack and analyze the performance of the current Enterprise Architecture. Using the findings, you would prepare a gap analysis of the current Enterprise Architecture. You would prepare change requests to address identified gaps. You would add the changes implemented to the Architecture Repository.

2. Scenario:
You are working as an Enterprise Architect within a company providing legal services. The company operates in many countries and has a complicated structure. Every office must follow the local regulations in their country.
The company's Enterprise Architecture (EA) department has been operating for several years and has mature, well-developed architecture governance and development processes based on the TOGAF standard. In addition to the EA program, the company has several management frameworks, including business planning, project/portfolio management, and operations management. The Architecture Board includes representatives from all parts of the company.
The Chief Information Officer (CIO) is the sponsor of the Enterprise Architecture program. The CIO has actively encouraged architecting with agility within the EA department as the preferred approach for projects.
The CIO has given approval for a Request for Architecture Work to explore the adoption of an AI-powered system for managing legal cases and financial processes.
Senior management has become more concerned about business performance, especially with the advancements in Artificial Intelligence (AI). Many of the company's competitors have started using AI to assist with legal strategies, streamline processes, and boost productivity. One of the most important benefits AI has for the business is its ability to increase accuracy and minimize mistakes.
Some of the top managers are worried about a change in the way of working, and if it will achieve the business goals. Their staff also fear that management will use the AI system to measure their performance.
The CIO wants to know how to address these concerns and reduce risks.
The new system is expected to guide legal professionals and analysts on which tasks to focus on. The main goals are to improve productivity and make better use of staff. In addition, the CIO hopes these changes will lead to higher customer satisfaction.
Refer to the scenario:
You have been asked to respond to the Chief Information Officer (CIO) recommending an approach that would enable the development of an architecture that addresses the concerns of the top managers and the multiple branches in different parts of the company.
Based on the TOGAF standard, which of the following is the best answer?

A) You recommend creation of a set of business models that can be applied uniformly across all AI-related architecture projects. These should be developed in a portable format to ensure maximum portability across the many tools used in the firm. Each architecture should then be defined based on this fixed set of models. All concerned stakeholders can then examine the models to ensure that their needs have been addressed.
B) You recommend that an analysis of the stakeholders is undertaken. This will allow the architects to define groups of partners (the stakeholders) who have common concerns and include development of a Stakeholder Map. The concerns and relevant views should then be defined for each group and recorded in the Architecture Vision document. To reduce risk, you include a requirement that there be progressive development of the target architecture to get regular feedback.
C) You recommend that models be created for each of the Business, Application, and Technology architectures. These can be used to ensure that the system will be compliant with the local regulations for each operating entity. This ensures that all necessary data and detail is addressed. A formal review should be held with the stakeholders to verify that their concerns have been properly addressed by the models.
D) You recommend that a Communications Plan be created to address the key stakeholders, particularly influential partners. This plan should include a report summarizing the key features of the architecture with respect to each location and reflect the stakeholders' requirements. You will check with each key stakeholder that their concerns have been addressed. Risk mitigation should be explicitly addressed as a component of the architecture being developed.

3. Please read this scenario prior to answering the question
You are employed as an Enterprise Architect at a technology company, reporting directly to the Chief Enterprise Architect. The company supplies personnel and delivers cloud- based solutions to numerous government agencies.
The nature of the business is such that the data and the information stored on the company systems is the company ' s major asset and is highly confidential. The company employees work remotely and need constant access to the company systems, which is done by the public infrastructure. They use message encryption, secure internet connections using Virtual Private Networks (VPNs), and other standard security measures. The company provides computer security awareness training for all its staff.
The Chief Security Officer (CSO) has noted an increase in distributed denial of service (DDoS) attacks on companies with a similar profile. The CSO understands that even with thorough preparation, a major attack could stop employees from being able to do their jobs. This could lead to a large financial loss, damage to the company ' s reputation with customers, and employees being unable to work.
A risk assessment has been completed and the company has looked for cyber insurance that covers such attacks. The price for this insurance is very high. The CTO has decided not to get cyber insurance to cover such attacks.
The company follows the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice. The Chief Technology Officer (CTO) is the sponsor of the activity. The practice uses an iterative approach for its architecture development.
This has enabled the decision makers to gain valuable insights into the different aspects of the business Please read this scenario prior to answering the question You have been asked to describe the steps you would take to strengthen the current architecture to improve data protection.
Based on the TOGAF standard which of the following is the best answer?

A) You would hold an Architecture Compliance Review with the scope to examinethe company ' s ability to respond to such attacks. You would identify thedepartments involved and have them nominate representatives. You wouldthen tailor checklists to address the requirement for increased businesscontinuity and resilience. You would circulate the checklists to the nominatedrepresentatives for them to complete. You would review the completedchecklists, identifying and resolving issues. You would then determine andpresent your recommendations to the Architecture Board.
B) You would request technology updates from existing suppliers that improve thecompany ' s capabilities to detect, react, and recover from an incident. Youwould run a simulated ransomware attack to evaluate the current EnterpriseArchitecture ' s resilience and recovery capabilities. Using the findings, youwould perform a gap analysis of the current Enterprise Architecture, andprepare change requests to address identified gaps. You would document thechanges implemented and add to the Architecture Repository.
C) You would ensure that business value and cost of continuity measures areunderstood by key stakeholders, and that the company has in place up-to-dateprocesses for managing change to the current Enterprise Architecture. Yourecommend that DDoS mitigation be addressed at the infrastructure level toensure effective, scalable protection. Changes should be made to the baselinedescription of the Technology Architecture. The changes should be approvedby the Architecture Board and implemented by change managementtechniques.
D) You would run a planning exercise to assess the business continuityrequirements and analyze the current Enterprise Architecture for gaps. Youcreate a formal change request related to business resilience and maintainingcritical business functions. You would arrange a meeting of the ArchitectureBoard to assess and approve the change request. Once approved you wouldcreate a new Request for Architecture Work to begin an ADM cycle toimplement the changes.

4. Please read this scenario prior to answering the question
You are employed as an Enterprise Architect working at a vehicle manufacturing company. The company specializes in buses and coaches. You are part of an Enterprise Architecture (EA) team that has responsibilities across multiple divisions of the company. EA provides the company with a comprehensive framework to develop and manage their manufacturing infrastructure, processes for component production, and design and testing systems.
The company has a corporate strategy that focuses on switching to electric power for its vehicles. It has invested heavily in a new standardized design, production efforts, and major components to use across all its product range. The company has multiple manufacturing plants in North America, Europe, and in Asia.
Customer demand has caused a backlog of orders because many customers want to have more environmentally friendly public transportation. There are not enough electronic components available, which is making it hard to produce products and meet customer demand. To address this issue, the company has started making the battery packs themselves and has hired new suppliers.
The EA team is working on a project to improve the process and systems to design, produce, and test the battery pack. As part of putting the new battery pack into production, changes to the assembly processes need to be made. A trial has been completed at a single location. The Chief Engineer, sponsor of the project, and the Architecture Board have approved the plan to roll out these changes to all plants.
Preliminary Architecture Contracts are being developed to detail the work needed to put in place the new processes for each location. The EA team leader has called a meeting to discuss the contracts. It is emphasized that the Architecture Contract will serve as the key connection between architecture and implementation organizations.
The company mixes internal teams with a few third-party contractors at the locations.
The Chief Engineer is worried that the implementation and deployment will not be consistent and of satisfactory quality.
The company has an established EA practice. It uses the TOGAF standard as the foundation for its work including the internal EA framework. Additionally, the company uses various management frameworks such as business planning, project management, and operations management.
Refer to the scenario
The EA team leader asks you how you would address the Chief Engineer ' s concern.
Based on the TOGAF standard, which of the following is the best answer?

A) The contracts must specify goals, measures, acceptance terms, and risks.Third-party contracts must be legally enforceable. It is advisable to establish aschedule of compliance reviews at key points in the implementation process.The Architecture Board must review all deviations from the ArchitectureContract and consider whether to grant a dispensation to allow the process tobe customized for local needs. Ensure that all dispensations are time-boundrather than indefinite.
B) The contracts must be used to manage the architecture governance processesacross the locations.Monitoring tools must be put in place to assess theperformance of each completed battery pack at each location. If a deviationfrom the contract is needed, the Architecture Board should allow theArchitecture Contract to be modified for the location. In such cases they shouldissue a new Request for Architecture Work to implement a modification to theArchitecture Definition.
C) The contracts must be checked to ensure they have flexibility. For changesundertaken by internal teams, a memorandum of understanding between theArchitecture Board and the implementation organization is needed. If acontract is issued to a contractor, it must be a fully enforceable legal contract. Ifa deviation from the Architecture Contract is found, the Architecture Boardmust grant a dispensation to allow the implementation organization tocustomize the process to meet their local needs.
D) The contracts must be checked to ensure they can be used to direct andcontrol the implementation teams. For contracts issued to third-partycontractors, they must be enforceable legal contracts. For internaldevelopment teams, a memorandum of understanding with the ArchitectureBoard is needed.
The Architecture Board must review all deviations from theArchitecture Contract and decide whether to grant a dispensation to allow theimplementation organization to customize the process to meet their localneeds.

5. Please read this scenario prior to answering the question
You are working as an Enterprise Architect at a large supermarket. The company runs many retail stores, as well as an online grocery shop. Many of the stores used to remain open 24/7, but the number has decreased in recent years. Instead, they now focus on fulfilling online orders during the night.
The company has a mature Enterprise Architecture (EA) practice and uses the TOGAF standard for its architecture development method. The EA practice is involved in all aspects of the business, with oversight provided by an Architecture Board with representatives from different parts of the business. The EA program is sponsored by the Chief Information Officer (CIO).
Each store uses a standard method to track sales and inventory. This involves sending accurate timely sales data to a central Al-based inventory management system that can predict demand, adjust stock levels and automate reordering. The central inventory management system is housed at the company ' s central data center.
The company has bought a major rival. The Chief Executive Officer believes that a merger will enable growth through combined offerings and cost savings. The decision has been taken to fully integrate the two organizations, including merging retail operations and systems. This means that duplicated systems will be replaced with one standard retail management system. Also, the company will reduce the number of applications that are used. The CIO expects significant savings will be achieved by implementing these changes across the newly merged company.
One improvement that the rival has successfully implemented is the use of hand-held devices within stores, for both customers and staff. This has increased both customer and staff employee satisfaction due to the time savings this has brought. The CIO has given the go-ahead to roll out the devices in all stores but has stated that training on how to use the hand-held devices should be brief because there are a lot of employees, many of whom are part-time.
The Request for Architecture Work to oversee the merger has been approved. The project has been scoped and you have been assigned to work on it. Your role includes managing the architecture for the retail stores.
Refer to the scenario
You have been asked to confirm the most relevant architecture principles for the transformation.
Based on the TOGAF Standard, which of the following is the best answer?
[Note: The sequence of the principles listed in each answer does not matter. You should assume the company follows the set of principles that are provided in the TOGAF Standard, ADM Techniques, Architecture Principles chapter. You may need to refer to section 2.6 located in ADM Techniques within the reference text to answer this question.]

A) Common Use Applications, Data is an Asset, Data is Accessible, Ease of Use, Business Continuity
B) Common Vocabulary and Data Definitions, Compliance with the Law, Requirements Based Change, Responsive Change Management, Data Security
C) Control Technical Diversity, Interoperability, Data is an Asset, Data is Shared, Business Continuity
D) Maximize Benefit to the Enterprise, Common Use Applications, Data is an Asset, Responsive Change Management, Technology Independence

Solutions: