Please read this scenario prior to answering the question
You are employed as an Enterprise Architect within a large law firm. The firm operates in many countries and has a complicated structure. Every office must follow the local regulations in their country.
The firm has an established Enterprise Architecture (EA) department which has been operating for several years. It has architecture governance and development processes based on the TOGAF standard. In addition to the EA program, the firm has several management frameworks in use, including business planning, project
/portfolio management, and operations management. The Architecture Board includes representatives from all parts of the firm.
The Chief Information Officer (CIO) is the sponsor of the Enterprise Architecture program. The CIO has actively encouraged architecting with agility within the EA department as her preferred approach for projects.
The CIO has given approval for a Request for Architecture Work to explore the adoption of an Al-based system for managing legal cases and financial processes.
Senior management has become more and more worried about how well the business is running, especially with the advancements In Artificial Intelligence (Al). Many of the firm ' s competitors have started using Al to assist with legal strategies, streamline processes, and boost productivity. One of the most important benefits Al has for the business is its ability to increase accuracy and minimize mistakes.
Some of the top managers are worried about a change in the way of working, and if it will achieve the goals.
Their staff also fear that management will use the system to measure their performance. The CIO wants to know how to address these concerns and reduce risks. The new system would provide guidance to legal professionals and analysts on which tasks to focus on. The main goals are to improve productivity and make better use of staff. In addition, the CIO hopes these changes will lead to higher customer satisfaction.
Refer to the scenario
The Chief Information Officer (CIO) has asked you how to address the concerns and lower risks when introducing artificial intelligence (Al) in the firm.
Based on the TOGAF standard which of the following is the best answer?

• A. Models should be created for each of the high-level Business. Application and Technology architectures included in the Architecture Vision. The models can be used to help the top management understand the new business direction, and make sure that the system will be compliant with the local regula tions for each operating entity. A formal review should be held with the stakeholders to confirm that their concerns have been properly addressed by the models.
• B. An analysis of the stakeholders should be carried out. This will allow the architects to define groups of stakeholders who have common concerns and include development of a Stakeholder Map. The concerns and relevant views should then be defined for each group and recorded in the Architecture Vision document. To reduce risk, you include a requirement that there be progressive development of the target architecture to get regular feedback.
• C. A set of business models should be developed with focus on the essential business problem and the vision of the change being proposed. These models will be used to build consensus with the top managers on the approach for deployment of the Al-based solution. A meeting should be held with the key stakeholders to explain how to use and understand the models. Risk will be managed as part of the Security Architecture development.
• D. The stakeholders should be identified, and their concerns documented in the Architecture Vision. A Communications Plan should be created to address the stakeholders. This plan should include a report that summarizes the key features of the architecture with respect to each location and the stakeholders* requirements. You will check with key stakeholders that their concerns are being addressed. Risk mitigation should be addressed as part of the architecture being developed.

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect working within the Enterprise Architecture (EA) team at an electric vehicle manufacturer. The company focuses on designing, manufacturing, and advancing battery technology for sustainable transportation. The goal of the company is to build the best technology and software platform to support self-driving cars.
An architecture to support strategy has been completed defining a long-term Target Architecture with a roadmap over five years. This has identified the need for a portfolio of projects over the next two years. The portfolio includes development of an advanced driver assistance system using data gathered from multiple vehicles on the road.
The design of the presentation and accessibility of different types of data that the company plans to offer through its platform is challenging. It is important for the application portfolio to work securely with third- party cloud services, and V2X (Vehicle-to-Everything) service providers across many countries in order to effectively manage large amounts of data. Stakeholders are particularly concerned about the security of V2X.
Regulations in various markets mandate that user privacy must always be safeguarded, to prevent tracking and compiling of data that could reveal the drivers ' journey.
The company follows the TOGAF standard as the basis for its Enterprise Architecture practice and uses the purpose-based EA Capability model as described in the TOGAF Series Guide: A Practitioners ' Approach to Developing Enterprise Architecture Following the TOGAF ADM. The EA team reports to the Chief Information Officer (CIO), who is the sponsor of the EA program.
You have been assigned to lead the architecture development effort for the driver assistance system. A security resource plan and a vision for a security-specific architecture design have been completed. You have a meeting with the EA team leader to talk about the progress of your work.
Refer to the scenario
You have been asked how you will address risk and security at this stage of the architecture project.
Based on the TOGAF standard which of the following is the best answer?

• A. A qualitative risk assessment should be carried out for the data assets exchanged with the service providers. This will deliver a set of priorities, high to medium to low, based on identified threats, the likelihood of occurrence, and the impact. Using the priorities, a Business Risk Model can then be developed detailing the risk strategy including classifications to determine what mitigation is sufficient.This model can then used to determine the risk strategy for the company.
• B. Data quality is a key factor in risk management. The datasets that need to be safeguarded should be identified. For each dataset, ownership and responsibility for the quality of data should be assigned. A security classification will be defined and applied to each dataset. The dataset owner will then be able to authorize processes that are trusted for a certain activity on the dataset under specific circumstances.
• C. A trust framework should be established with the third parties required for the travel assistance systems.
  This will describe the relationship with each party and establish the foundation for secure cloud operations. Digital certificates should be a key part of the framework and will be used to create trust between the parties. Regular monitoring for legal and regulatory changes across all the countries should occur to keep the trust framework in compliance.
• D. Since data is being shared across multiple service providers, a security federation should be established.
  This includes contractual arrangements, and a definition of the responsibility areas for the data exchanged, as well as security implications. Assets with the same security criteria should be grouped together so they can be managed under one security policy. A risk assessment should be carried out to determine the risks relevant to specific data assets.

Please read this scenario prior to answering the question
Your role is that of a consultant to the Lead Enterprise Architect in a multinational automotive manufacturer.
The company has a corporate strategy that focuses on electrification of its portfolio, and it has invested heavily in a new shared car platform to use across all its brands. The company has four manufacturing facilities, one in North America, two in Europe, and one in Asia.
A challenge that the company is facing is to scale up the number of vehicles coming off the production line to meet customer demand, while maintaining quality. There are significant supply chain shortages for electronic components, which are impacting production. In response to this the company has taken on new suppliers and has also taken design and production of the battery pack in-house.
The company has a mature Enterprise Architecture practice. The TOGAF standard is used for developing the process and systems used to design, manufacture, and test the battery pack. The Chief Information Officer and the Chief Operating Officer co-sponsor the Enterprise Architecture program.
As part of putting the new battery pack into production, adjustments to the assembly processes need to be made. A pilot project has been completed at a single location. The Chief Engineer, sponsor of the activity, and the Architecture Board have approved the plan for implementation and migration at each plant.
Draft Architecture Contracts have been developed that detail the work needed to implement and deploy the new processes for each location. The company mixes internal teams with a few third-party contractors at the locations. The Chief Engineer has expressed concern that the deployment will not be consistent and of acceptable quality.
Refer to the scenario
The Lead Enterprise Architect has asked you to review the draft Architecture Contracts and recommend the best approach to address the Chief Engineer ' s concern.
Based on the TOGAF Standard, which of the following is the best answer?

• A. For changes undertaken by internal teams, you recommend a memorandum of understandingbetween the Architecture Board and the implementation organization. If a contract is issued to acontractor, you recommend that it is a fully enforceable legal contract. If a deviation from theArchitecture Contract is found, you recommend that the Architecture Board grant a dispensation toallow the implementation organization to customize the process to meet their local needs.
• B. For changes requested by an internal team, you recommend a memorandum of understandingbetween the Architecture Board and the implementation organization. For contracts issued to third-party contractors, you recommend that it is a fully enforceable legal contract. You recommend thatthe Architecture Board reviews all deviations from the Architecture Contract and considers whether togrant a dispensation to allow the implementation organization to customize the process to meet theirlocal needs.
• C. You review the contracts ensuring that they address project objectives, effectiveness metrics,acceptance criteria, and risk management. Third-party contracts must be legally enforceable. Yourecommend a schedule of compliance reviews at key points in the implementation process. Yourecommend that the Architecture Board reviews all deviations from the Architecture Contract andconsiders whether to grant a dispensation to allow the process to be customized for local needs.
• D. You recommend that the Architecture Contracts be used to manage the architecture governanceprocesses across the locations. You recommend deployment of monitoring tools to assess theperformance of each completed battery pack at each location and develop change requirements ifnecessary. If a deviation from the contract is detected, the Architecture Board should allow theArchitecture Contract to be modified meet the local needs. In such cases they should issue a newRequest for Architecture Work to implement a modification to the Architecture Definition.

Please read this scenario prior to answering the question
You are working as Chief Enterprise Architect at a large Internet company. The company has many divisions, ranging from cloud to logistics. The company has grown rapidly, expanding from initially selling physical books and media to a range of services including an online marketplace, live-streaming. eBooks. and cloud services.
Overall management of the numerous divisions has become challenging. Recent high-profile projects have overrun on budget and under delivered, damaging the company ' s reputation, and adversely impacting its share price. There is a widely held view within the executive management that the organization structure has played a major role in these project failures.
The company has an established Enterprise Architecture program based on the TOGAF standard, sponsored jointly by the Chief Executive Officer (CEO) and Chief Information Officer (CIO). The CEO has decided that the company needs to reorganize its divisions around artificial intelligence and machine learning with a focus on automation. The CEO has worked with the Enterprise Architects to create a strategic architecture for the reorganization, including an Architecture Vision, together with definitions for the four domain architectures.
This sets out an ambitious vision of the future of the company over a three-year period. This includes a set of work packages and includes three distinct transformations.
The CIO has made it clear that prior to the approval of the detailed Implementation and Migration plan, the EAteam will need to assess the risks associated with the proposed architecture. He has received concerns from key stakeholders across the company that the proposed reorganization may be too ambitious and there is doubt whether it can produce sufficient value to warrant the risks.
Refer to the scenario
You have been asked to recommend an approach to satisfy these concerns. Based on the TOGAF Standard, which of the following is the best answer?

• A. Establishing interoperability in alignment with the corporate operating model will ensure risks are minimized. The Enterprise Architects should apply an interoperability analysis to evaluate any potential issues across the architecture. This should include the development of a matrix showing the interoperability requirements. These can then be included within the transformation strategy embedded in the target transition architectures. The Enterprise Architects should then finalize the Architecture Roadmap and the Implementation and Migration Plan.
• B. The Enterprise Architects should evaluate the organization ' s readiness to undergo change. This will allow the risks associated with the transformations to be identified, classified, and mitigated for. This should include identifying dependencies between the set of changes, including gaps and work packages.
  It will also identify improvement actions to be worked into the Implementation and Migration Plan. The business value, effort, and risk associated for each transformation should be determined.
• C. Before preparing the detailed Implementation and Migration plan, the EnterpriseArchitects should review and consolidate the gap analysis results from Phases B toThis will identify the transformations required to achieve the proposed TargetArchitecture. The Enterprise Architects should then assess the readiness of theorganization to undergo change and determine an overall direction to address andmitigate risks identified. The Transition Architecture should then be planned to use astate evolution table.
• D. The Enterprise Architects should bring together information about potential approaches and produce several alternative target transition architectures. They should then investigate the different architecture alternatives and discuss these with stakeholders using the Architecture Alternatives and Trade-offs technique. Once the target architecture has been selected, it should be analyzed using a state evolution table to determine the Transition Architectures. A value realization process should then be established to ensure that the concerns raised are addressed.