Please read this scenario prior to answering the question
You are the Chief Enterprise Architect at a large food service company specializing in sales to trade and wholesale, for example, restaurants and other food retailers.
One of your company ' s competitors has launched a revolutionary product range and is running a very aggressive marketing campaign. Your company ' s resellers are successively announcing that they are not interested in your company ' s products and will sell your competitor ' s.
The CEO has stated there must be significant change to address the situation. He has made it clear that new markets must be found for the company ' s products, and that the business needs to pivot, and address the retail market as well as the existing wholesale market.
A consideration is the company ' s ability and willingness to change its business model, and if it is a temporary or permanent change. An additional risk factor is one of culture. The company has been used to a stable business with a reasonably well known and settled client base - all with its own local understandings and practices.
The CEO is the sponsor of the EA program within the company. You have been engaged with the sales, logistics, production, and marketing teams, enabling the architecture activity to start. An Architecture Vision, Architecture Principles, and Requirements have all been agreed. As you move forward to develop a possible Target Architecture you have identified that some of the key stakeholders ' preferences are incompatible. The incompatibilities are focused primarily on time-to-market, cost savings, and the need to bring out a fully featured product range, but there are additional factors.
Refer to the scenario
You have been asked how you will address the incompatibilities between key stakeholder preferences.
Based on the TOGAF standard which of the following is the best answer?

• A. You would use the Architecture Vision, Principles, and Requirements to define a set of criteria foralternatives and create a set of architecture views to illustrate the impact of the alternative TargetArchitectures. You would identify the impact on planned projects. You would understand the strengthsand weaknesses of the alternatives. You would conduct a formal stakeholder review to decide whichalternative to move forward with. You will determine the funding required.
• B. You would seek to understand value preferences and priorities of the stakeholders. You woulddevelop alternative Target Architectures, highlighting the gaps between current state and thealternatives. You would consider combining features from one or more alternatives in collaborationwith the stakeholders.
  A formal stakeholder review should then be held to decide which alternative isfit for purpose and should be moved forward with. You will then secure the funding required.
• C. You would review the Stakeholder Map and ensure that you have addressed and represented theconcerns of all department heads. You will involve them in resolving the incompatibilities.TheCommunications Plan should include a report that summarizes the key features of the architecturewith and how incompatibilities were resolved to reflects the stakeholders ' requirements.You willcheck with each key stakeholder they are satisfied with how the incompatibilities have been resolved.
• D. You recommend that since the CEO has stated that the company must pivot, it is better tocompromise on a full product range rather than time-to-market. You would develop just enough of theTarget Architecture to demonstrate fitness of the proposed approach. You would limit the descriptionto just where there is a gap between the current baseline. You would seek approval by thestakeholders to move forward with developing the Target Architecture in detail.

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect at a technology company, reporting directly to the Chief Enterprise Architect. The company supplies personnel and delivers cloud- based solutions to numerous government agencies.
The nature of the business is such that the data and the information stored on the company systems is the company ' s major asset and is highly confidential. The company employees work remotely and need constant access to the company systems, which is done by the public infrastructure. They use message encryption, secure internet connections using Virtual Private Networks (VPNs), and other standard security measures. The company provides computer security awareness training for all its staff.
The Chief Security Officer (CSO) has noted an increase in distributed denial of service (DDoS) attacks on companies with a similar profile. The CSO understands that even with thorough preparation, a major attack could stop employees from being able to do their jobs. This could lead to a large financial loss, damage to the company ' s reputation with customers, and employees being unable to work.
A risk assessment has been completed and the company has looked for cyber insurance that covers such attacks. The price for this insurance is very high. The CTO has decided not to get cyber insurance to cover such attacks.
The company follows the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice. The Chief Technology Officer (CTO) is the sponsor of the activity. The practice uses an iterative approach for its architecture development.
This has enabled the decision makers to gain valuable insights into the different aspects of the business Please read this scenario prior to answering the question You have been asked to describe the steps you would take to strengthen the current architecture to improve data protection.
Based on the TOGAF standard which of the following is the best answer?

• A. You would hold an Architecture Compliance Review with the scope to examinethe company ' s ability to respond to such attacks. You would identify thedepartments involved and have them nominate representatives. You wouldthen tailor checklists to address the requirement for increased businesscontinuity and resilience. You would circulate the checklists to the nominatedrepresentatives for them to complete. You would review the completedchecklists, identifying and resolving issues. You would then determine andpresent your recommendations to the Architecture Board.
• B. You would run a planning exercise to assess the business continuityrequirements and analyze the current Enterprise Architecture for gaps. Youcreate a formal change request related to business resilience and maintainingcritical business functions. You would arrange a meeting of the ArchitectureBoard to assess and approve the change request. Once approved you wouldcreate a new Request for Architecture Work to begin an ADM cycle toimplement the changes.
• C. You would ensure that business value and cost of continuity measures areunderstood by key stakeholders, and that the company has in place up-to-dateprocesses for managing change to the current Enterprise Architecture. Yourecommend that DDoS mitigation be addressed at the infrastructure level toensure effective, scalable protection. Changes should be made to the baselinedescription of the Technology Architecture. The changes should be approvedby the Architecture Board and implemented by change managementtechniques.
• D. You would request technology updates from existing suppliers that improve thecompany ' s capabilities to detect, react, and recover from an incident. Youwould run a simulated ransomware attack to evaluate the current EnterpriseArchitecture ' s resilience and recovery capabilities. Using the findings, youwould perform a gap analysis of the current Enterprise Architecture, andprepare change requests to address identified gaps. You would document thechanges implemented and add to the Architecture Repository.

Scenario:
You are working as an Enterprise Architect within a company providing legal services. The company operates in many countries and has a complicated structure. Every office must follow the local regulations in their country.
The company's Enterprise Architecture (EA) department has been operating for several years and has mature, well-developed architecture governance and development processes based on the TOGAF standard. In addition to the EA program, the company has several management frameworks, including business planning, project/portfolio management, and operations management. The Architecture Board includes representatives from all parts of the company.
The Chief Information Officer (CIO) is the sponsor of the Enterprise Architecture program. The CIO has actively encouraged architecting with agility within the EA department as the preferred approach for projects.
The CIO has given approval for a Request for Architecture Work to explore the adoption of an AI-powered system for managing legal cases and financial processes.
Senior management has become more concerned about business performance, especially with the advancements in Artificial Intelligence (AI). Many of the company's competitors have started using AI to assist with legal strategies, streamline processes, and boost productivity. One of the most important benefits AI has for the business is its ability to increase accuracy and minimize mistakes.
Some of the top managers are worried about a change in the way of working, and if it will achieve the business goals. Their staff also fear that management will use the AI system to measure their performance.
The CIO wants to know how to address these concerns and reduce risks.
The new system is expected to guide legal professionals and analysts on which tasks to focus on. The main goals are to improve productivity and make better use of staff. In addition, the CIO hopes these changes will lead to higher customer satisfaction.
Refer to the scenario:
You have been asked to respond to the Chief Information Officer (CIO) recommending an approach that would enable the development of an architecture that addresses the concerns of the top managers and the multiple branches in different parts of the company.
Based on the TOGAF standard, which of the following is the best answer?

• A. You recommend that models be created for each of the Business, Application, and Technology architectures. These can be used to ensure that the system will be compliant with the local regulations for each operating entity. This ensures that all necessary data and detail is addressed. A formal review should be held with the stakeholders to verify that their concerns have been properly addressed by the models.
• B. You recommend creation of a set of business models that can be applied uniformly across all AI-related architecture projects. These should be developed in a portable format to ensure maximum portability across the many tools used in the firm. Each architecture should then be defined based on this fixed set of models. All concerned stakeholders can then examine the models to ensure that their needs have been addressed.
• C. You recommend that an analysis of the stakeholders is undertaken. This will allow the architects to define groups of partners (the stakeholders) who have common concerns and include development of a Stakeholder Map. The concerns and relevant views should then be defined for each group and recorded in the Architecture Vision document. To reduce risk, you include a requirement that there be progressive development of the target architecture to get regular feedback.
• D. You recommend that a Communications Plan be created to address the key stakeholders, particularly influential partners. This plan should include a report summarizing the key features of the architecture with respect to each location and reflect the stakeholders' requirements. You will check with each key stakeholder that their concerns have been addressed. Risk mitigation should be explicitly addressed as a component of the architecture being developed.

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect within a large law firm. The firm operates in many countries and has a complicated structure. Every office must follow the local regulations in their country.
The firm has an established Enterprise Architecture (EA) department which has been operating for several years. It has architecture governance and development processes based on the TOGAF standard. In addition to the EA program, the firm has several management frameworks in use, including business planning, project
/portfolio management, and operations management. The Architecture Board includes representatives from all parts of the firm.
The Chief Information Officer (CIO) is the sponsor of the Enterprise Architecture program. The CIO has actively encouraged architecting with agility within the EA department as her preferred approach for projects.
The CIO has given approval for a Request for Architecture Work to explore the adoption of an Al-based system for managing legal cases and financial processes.
Senior management has become more and more worried about how well the business is running, especially with the advancements In Artificial Intelligence (Al). Many of the firm ' s competitors have started using Al to assist with legal strategies, streamline processes, and boost productivity. One of the most important benefits Al has for the business is its ability to increase accuracy and minimize mistakes.
Some of the top managers are worried about a change in the way of working, and if it will achieve the goals.
Their staff also fear that management will use the system to measure their performance. The CIO wants to know how to address these concerns and reduce risks. The new system would provide guidance to legal professionals and analysts on which tasks to focus on. The main goals are to improve productivity and make better use of staff. In addition, the CIO hopes these changes will lead to higher customer satisfaction.
Refer to the scenario
The Chief Information Officer (CIO) has asked you how to address the concerns and lower risks when introducing artificial intelligence (Al) in the firm.
Based on the TOGAF standard which of the following is the best answer?

• A. The stakeholders should be identified, and their concerns documented in the Architecture Vision. A Communications Plan should be created to address the stakeholders. This plan should include a report that summarizes the key features of the architecture with respect to each location and the stakeholders* requirements. You will check with key stakeholders that their concerns are being addressed. Risk mitigation should be addressed as part of the architecture being developed.
• B. A set of business models should be developed with focus on the essential business problem and the vision of the change being proposed. These models will be used to build consensus with the top managers on the approach for deployment of the Al-based solution. A meeting should be held with the key stakeholders to explain how to use and understand the models. Risk will be managed as part of the Security Architecture development.
• C. Models should be created for each of the high-level Business. Application and Technology architectures included in the Architecture Vision. The models can be used to help the top management understand the new business direction, and make sure that the system will be compliant with the local regula tions for each operating entity. A formal review should be held with the stakeholders to confirm that their concerns have been properly addressed by the models.
• D. An analysis of the stakeholders should be carried out. This will allow the architects to define groups of stakeholders who have common concerns and include development of a Stakeholder Map. The concerns and relevant views should then be defined for each group and recorded in the Architecture Vision document. To reduce risk, you include a requirement that there be progressive development of the target architecture to get regular feedback.

Scenario
Your role is that of an Enterprise Architect, reporting to the Chief Enterprise Architect, at a technology company.
The company uses the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice. The Chief Technology Officer (CTO) is the sponsor of the activity. The EA practice uses an iterative approach for its architecture development. This has enabled the decision-makers to gain valuable insights into the different aspects of the business.
The nature of the business is such that the data and the information stored on the company systems is the company's major asset and is highly confidential. The company employees travel a lot for work and need to communicate over public infrastructure. They use message encryption, secure internet connections using Virtual Private Networks (VPNs), and other standard security measures. The company has provided computer security awareness training for all its staff. However, despite good education and system security, there is still a need to rely on third-party suppliers for infrastructure and software.
The Chief Security Officer (CSO) has noted an increase in ransomware (malicious software used in ransom demands) attacks on companies with a similar profile. The CSO recognizes that no matter how much is spent on education and support, the company could be a victim of a significant attack that could completely lock them out of their important data.
A risk assessment has been completed, and the company has looked for cyber insurance that covers ransomware. The price for this insurance is very high. The CTO recently saw a survey that said 1 out of 4 businesses that paid ransoms could not get their data back, and almost thesame number were able to recover the data without paying. The CTO has decided not to get cyber insurance to cover ransom payment.
You have been asked to describe the steps you would take to strengthen the current architecture to improve data protection.
Based on the TOGAF standard, which of the following is the best answer?

• A. You would request an Architecture Compliance Review with the scope to examine the company's ability to respond to ransomware attacks. You would identify the departments involved and have them nominate representatives. You would then tailor checklists to address the requirement for increased resilience. You would circulate to the nominated representatives for them to complete. You would then review the completed checklists, identifying and resolving issues. You would then determine and present your recommendations.
• B. You would ensure that the company has in place up-to-date processes for managing change to the current Enterprise Architecture. Based on the scope of the concerns raised, you recommend that this be managed at the infrastructure level. Changes should be made to the baseline description of the Technology Architecture. The changes should be approved by the Architecture Board and implemented by change management techniques.
• C. You would assess business continuity requirements and analyze the current Enterprise Architecture for gaps. You would recommend changes to address the situation and create a change request. You would engage the Architecture Board to assess and approve the change request. Once approved, you would create a new Request for Architecture Work to begin an ADM cycle to implement the changes.
• D. You would monitor for technology updates from your existing suppliers that could enhance the company's capabilities to detect, react, and recover from an IT security incident. You would prepare and run a disaster recovery planning exercise for a ransomware attack and analyze the performance of the current Enterprise Architecture. Using the findings, you would prepare a gap analysis of the current Enterprise Architecture. You would prepare change requests to address identified gaps. You would add the changes implemented to the Architecture Repository.