The Open Group TOGAF Enterprise Architecture Part 2 認定 OGEA-102 試験問題:

1. Scenario:
You are working as an Enterprise Architect within a company providing legal services. The company operates in many countries and has a complicated structure. Every office must follow the local regulations in their country.
The company's Enterprise Architecture (EA) department has been operating for several years and has mature, well-developed architecture governance and development processes based on the TOGAF standard. In addition to the EA program, the company has several management frameworks, including business planning, project/portfolio management, and operations management. The Architecture Board includes representatives from all parts of the company.
The Chief Information Officer (CIO) is the sponsor of the Enterprise Architecture program. The CIO has actively encouraged architecting with agility within the EA department as the preferred approach for projects.
The CIO has given approval for a Request for Architecture Work to explore the adoption of an AI-powered system for managing legal cases and financial processes.
Senior management has become more concerned about business performance, especially with the advancements in Artificial Intelligence (AI). Many of the company's competitors have started using AI to assist with legal strategies, streamline processes, and boost productivity. One of the most important benefits AI has for the business is its ability to increase accuracy and minimize mistakes.
Some of the top managers are worried about a change in the way of working, and if it will achieve the business goals. Their staff also fear that management will use the AI system to measure their performance.
The CIO wants to know how to address these concerns and reduce risks.
The new system is expected to guide legal professionals and analysts on which tasks to focus on. The main goals are to improve productivity and make better use of staff. In addition, the CIO hopes these changes will lead to higher customer satisfaction.
Refer to the scenario:
You have been asked to respond to the Chief Information Officer (CIO) recommending an approach that would enable the development of an architecture that addresses the concerns of the top managers and the multiple branches in different parts of the company.
Based on the TOGAF standard, which of the following is the best answer?

A) You recommend creation of a set of business models that can be applied uniformly across all AI-related architecture projects. These should be developed in a portable format to ensure maximum portability across the many tools used in the firm. Each architecture should then be defined based on this fixed set of models. All concerned stakeholders can then examine the models to ensure that their needs have been addressed.
B) You recommend that models be created for each of the Business, Application, and Technology architectures. These can be used to ensure that the system will be compliant with the local regulations for each operating entity. This ensures that all necessary data and detail is addressed. A formal review should be held with the stakeholders to verify that their concerns have been properly addressed by the models.
C) You recommend that a Communications Plan be created to address the key stakeholders, particularly influential partners. This plan should include a report summarizing the key features of the architecture with respect to each location and reflect the stakeholders' requirements. You will check with each key stakeholder that their concerns have been addressed. Risk mitigation should be explicitly addressed as a component of the architecture being developed.
D) You recommend that an analysis of the stakeholders is undertaken. This will allow the architects to define groups of partners (the stakeholders) who have common concerns and include development of a Stakeholder Map. The concerns and relevant views should then be defined for each group and recorded in the Architecture Vision document. To reduce risk, you include a requirement that there be progressive development of the target architecture to get regular feedback.

2. Please read this scenario prior to answering the question
You are employed as an Enterprise Architect working within the Enterprise Architecture (EA) team at an electric vehicle manufacturer. The company focuses on designing, manufacturing, and advancing battery technology for sustainable transportation. The goal of the company is to build the best technology and software platform to support self-driving cars.
An architecture to support strategy has been completed defining a long-term Target Architecture with a roadmap over five years. This has identified the need for a portfolio of projects over the next two years. The portfolio includes development of an advanced driver assistance system using data gathered from multiple vehicles on the road.
The design of the presentation and accessibility of different types of data that the company plans to offer through its platform is challenging. It is important for the application portfolio to work securely with third- party cloud services, and V2X (Vehicle-to-Everything) service providers across many countries in order to effectively manage large amounts of data. Stakeholders are particularly concerned about the security of V2X.
Regulations in various markets mandate that user privacy must always be safeguarded, to prevent tracking and compiling of data that could reveal the drivers ' journey.
The company follows the TOGAF standard as the basis for its Enterprise Architecture practice and uses the purpose-based EA Capability model as described in the TOGAF Series Guide: A Practitioners ' Approach to Developing Enterprise Architecture Following the TOGAF ADM. The EA team reports to the Chief Information Officer (CIO), who is the sponsor of the EA program.
You have been assigned to lead the architecture development effort for the driver assistance system. A security resource plan and a vision for a security-specific architecture design have been completed. You have a meeting with the EA team leader to talk about the progress of your work.
Refer to the scenario
You have been asked how you will address risk and security at this stage of the architecture project.
Based on the TOGAF standard which of the following is the best answer?

A) Since data is being shared across multiple service providers, a security federation should be established.
This includes contractual arrangements, and a definition of the responsibility areas for the data exchanged, as well as security implications. Assets with the same security criteria should be grouped together so they can be managed under one security policy. A risk assessment should be carried out to determine the risks relevant to specific data assets.
B) Data quality is a key factor in risk management. The datasets that need to be safeguarded should be identified. For each dataset, ownership and responsibility for the quality of data should be assigned. A security classification will be defined and applied to each dataset. The dataset owner will then be able to authorize processes that are trusted for a certain activity on the dataset under specific circumstances.
C) A qualitative risk assessment should be carried out for the data assets exchanged with the service providers. This will deliver a set of priorities, high to medium to low, based on identified threats, the likelihood of occurrence, and the impact. Using the priorities, a Business Risk Model can then be developed detailing the risk strategy including classifications to determine what mitigation is sufficient.This model can then used to determine the risk strategy for the company.
D) A trust framework should be established with the third parties required for the travel assistance systems.
This will describe the relationship with each party and establish the foundation for secure cloud operations. Digital certificates should be a key part of the framework and will be used to create trust between the parties. Regular monitoring for legal and regulatory changes across all the countries should occur to keep the trust framework in compliance.

3. Please read this scenario prior to answering the question
You are employed as an Enterprise Architect at a large technology company with diverse business lines. The company has multiple divisions, engaged in mobile, e-commerce, cloud computing services, and a social network.
The company has an established Enterprise Architecture (EA) practice based on the TOGAF standard, including the TOGAF ADM. The EA program is sponsored by the Chief Information Officer (CIO). The use of EA has enabled the company to gain valuable insights into different parts of the business. One of the primary goals in the EA program charter is to coordinate efforts between the teams in each division. This has made sure that the mobile, e-commerce, cloud, and social media initiatives remain aligned with business strategy.
The practice has an established Architecture Capability and uses iteration for architecture development. The iterative approach is well-suited for modern digital transformation initiatives, where the company must adapt quickly to new business and market challenges. In addition to the EA program, the company uses several management frameworks, including business planning, project/portfolio management, and operations management.
The company is growing rapidly. A consequence of this rapid growth has been the proliferation of multiple IT solutions, with architecture giving way to growth. The company appears to be failing to architect its growth.
Several systems have proved unreliable with some major outages, including the e-commerce system being offline for eight hours at the start of the holiday sales period, as well as the cloud computing services outage, which took down several popular websites. The service management organization within the company has blamed the outages on misalignment of the IT solutions.
The Governing Board has raised concerns about the outages. As a consequence, the CEO has asked for better reporting and management of the IT portfolio. The task has been assigned to the EAteam, with a constraint to maintain business as usual.
Refer to the Scenario
You have been asked to assess the IT solutions to determine where problems are occurring and where change is needed.
Based on the TOGAF standard, which of the following is the best answer?

A) The team should evaluate the IT resources across the company against the operational performance data and business needs. This will include a review of availability and responsiveness. You would assess the current applications and technology infrastructure by commencing an iteration cycle following a baseline first architecture development approach. This would allow you to identify improvement opportunities and allow you to determine where misalignment is occurring.
B) The team should start an iteration cycle by defining the baseline Technology Architecture first to assess the current infrastructure capacity and capability for the company. There should be an assessment of the operational performance data. This is needed to diagnose the causes of the system outages. The results of the assessment can then be used to identify the required changes to make sure that the misalignments between solutions are removed.
C) The team should start an iteration cycle of target architecture definition. The team will then identify the requirements, drivers, issues, and constraints to support the change. The result will be a more resilient architecture to support definition of a set of IT solutions that will address the misalignment. You would ensure that non-functional requirements are well defined to make sure that the target architecture is robust and reliable.
D) The team should commence an architecture development cycle through the architecture definition phases (B-D) with the purpose to understand the causes of the outages. This will allow the concerns of the Governing Board to be addressed through each of the Business, Information Systems, and Technology Architecture phases. This will identify the changes in a structured manner and make sure they address the requirements.

4. Please read this scenario prior to answering the question
You are employed as an Enterprise Architect for a company that is an international supplier of manufacturing systems.
The company has multiple manufacturing plants where it assembles both standard and customized products for industrial production automation. Each of these plants has been operating its own planning and production scheduling systems, as well as applications and control systems that drive the automated production line. The current systems work with the local partners in the supply chain at each plant.
The company has been facing competition in the marketplace and its leadership has been considering how to improve production efficiency. A favored proposal is to replace many of the systems with a centralized system communicating with the manufacturing plants. The CIO has asked the EA team to develop an architecture for this approach that supports both standardized and customized production across multiple manufacturing plants, while maintaining enterprise-wide integration and governance.
The company has an Enterprise Architecture (EA) practice and uses the TOGAF standard as the basis for its work. It has been running for many years and has established governance and development processes for EA.
The Chief Information Officer (CIO) sponsors the Enterprise Architecture program. You are part of an Enterprise Architecture (EA) team that has responsibilities across the company.
As a supplier of manufacturing systems with multiple plants, there are many interested parties that will need to be satisfied.
The Architecture Board has approved the Request for Architecture Work to find out if such an architecture transformation would lead to efficiency improvements.
Refer to the scenario
You have been assigned to lead this project and asked to outline your next steps.
Based on the TOGAF standard, which of the following is the best answer?

A) You would run a proof-of-concept project to allow your suppliers to demonstrate candidate off-the- shelf solutions that address the concerns of the stakeholders. After looking at the results of the project, you would select the most efficient solution and use that to set the requirements. Once the re quirements are complete, there should be a formal stakeholder review, and permission requested to move forward to develop the Target Architecture.
B) You would run multiple workshops at the manufacturing plants to discover and document business requirements. This would also help you understand the location-specific problems and identify the actors and roles at each location. You would create a matrix of stakeholders to identify key people involved and their concerns. You would then determine and record the main stakeholder requirements for the architecture. Finally, you would create clear high-level descriptions of the current and future architectures.
C) You would conduct a series of workshops with the local partners to gather requirements from them.
Based on the findings from the workshops, you would define a preliminary Architecture Vision including summary views, high-level requirements, and high-level definitions of the baseline and target environments from a business, information systems, and technology perspective. You would then use the Architecture Vision to build agreement among the local partners.
D) You would create high level views of the baseline and target Architectures for each manufacturing plant, and then a set of views corresponding to selected viewpoints to address key concerns of the stakeholders. The gap analysis results for the architectures should be reviewed and consolidated into a single list. A set of work packages should be identified. A formal stakeholder review should be held to obtain approval before moving to the Target Architecture phase.

5. Scenario
Your role is that of an Enterprise Architect, reporting to the Chief Enterprise Architect, at a technology company.
The company uses the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice. The Chief Technology Officer (CTO) is the sponsor of the activity. The EA practice uses an iterative approach for its architecture development. This has enabled the decision-makers to gain valuable insights into the different aspects of the business.
The nature of the business is such that the data and the information stored on the company systems is the company's major asset and is highly confidential. The company employees travel a lot for work and need to communicate over public infrastructure. They use message encryption, secure internet connections using Virtual Private Networks (VPNs), and other standard security measures. The company has provided computer security awareness training for all its staff. However, despite good education and system security, there is still a need to rely on third-party suppliers for infrastructure and software.
The Chief Security Officer (CSO) has noted an increase in ransomware (malicious software used in ransom demands) attacks on companies with a similar profile. The CSO recognizes that no matter how much is spent on education and support, the company could be a victim of a significant attack that could completely lock them out of their important data.
A risk assessment has been completed, and the company has looked for cyber insurance that covers ransomware. The price for this insurance is very high. The CTO recently saw a survey that said 1 out of 4 businesses that paid ransoms could not get their data back, and almost thesame number were able to recover the data without paying. The CTO has decided not to get cyber insurance to cover ransom payment.
You have been asked to describe the steps you would take to strengthen the current architecture to improve data protection.
Based on the TOGAF standard, which of the following is the best answer?

A) You would ensure that the company has in place up-to-date processes for managing change to the current Enterprise Architecture. Based on the scope of the concerns raised, you recommend that this be managed at the infrastructure level. Changes should be made to the baseline description of the Technology Architecture. The changes should be approved by the Architecture Board and implemented by change management techniques.
B) You would assess business continuity requirements and analyze the current Enterprise Architecture for gaps. You would recommend changes to address the situation and create a change request. You would engage the Architecture Board to assess and approve the change request. Once approved, you would create a new Request for Architecture Work to begin an ADM cycle to implement the changes.
C) You would monitor for technology updates from your existing suppliers that could enhance the company's capabilities to detect, react, and recover from an IT security incident. You would prepare and run a disaster recovery planning exercise for a ransomware attack and analyze the performance of the current Enterprise Architecture. Using the findings, you would prepare a gap analysis of the current Enterprise Architecture. You would prepare change requests to address identified gaps. You would add the changes implemented to the Architecture Repository.
D) You would request an Architecture Compliance Review with the scope to examine the company's ability to respond to ransomware attacks. You would identify the departments involved and have them nominate representatives. You would then tailor checklists to address the requirement for increased resilience. You would circulate to the nominated representatives for them to complete. You would then review the completed checklists, identifying and resolving issues. You would then determine and present your recommendations.

質問と回答：