Question 16

Please read this scenario prior to answering the question
Your role is that of a senior architect, reporting to the Chief Enterprise Architect, at a medium-sized company with 400 employees. The nature of the business is such that the data and the information stored on the company systems is their major asset and is highly confidential.
The company employees travel extensively for work and must communicate over public infrastructure using message encryption, VPNs, and other standard safeguards. The company has invested in cybersecurity awareness training for all its staff. However, it is recognized that even with good education as well as system security, there is a dependency on third-parly suppliers of infrastructure and software.
The company uses the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice. The CTO is the sponsor of the activity.
The Chief Security Officer (CSO) has noted an increase in ransomware (malicious software used in ransom demands) attacks on companies with a similar profile. The CSO recognizes that no matter how much is spent on education, and support, it is likely just a matter of time before the company suffers a significant attack that could completely lock them out of their information assets.
A risk assessment has been done and the company has sought cyber insurance that includes ransomware coverage. The quotation for this insurance is hugely expensive. The CTO has recently read a survey that stated that one in four organizations paying ransoms were still unable to recover their data, while nearly as many were able to recover the data without paying a ransom. The CTO has concluded that taking out cyber insurance in case they need to pay a ransom is not an option.
Refer to the scenario
You have been asked to describe the steps you would take to improve the resilience of the current architecture?
Based on the TOGAF standard which of the following is the best answer?
  • Question 17

    Please read this scenario prior to answering the question
    You are employed as an Enterprise Architect within a clinical research and health technologies company. The company is dedicated to transforming healthcare with new ideas and advancements. The company has multiple divisions that cover different aspects of the business.
    The company's Enterprise Architecture (EA) department has mature, well-developed architecture governance and development processes following the TOGAF standard.
    In addition to the EA program, the company has a number of management
    frameworks in use. The Architecture Board includes representatives from each division of the company. The Chief Information Officer (CIO) is the sponsor of the Enterprise Architecture program. The CIO has actively encouraged architecting with agility within the EA department as the preferred approach for projects.
    Many of the company's rivals have begun using Artificial Intelligence (Al) in their operations, and the indications are that this will be transformative for healthcare delivery. This is something the EA department has been interested in for a while, and they had recently submitted an architecture Change Request which was approved. As a result, the CIO has approved a Request for Architecture Work to investigate the implementation of Al in the company.
    Areas for evaluation include:
    How can staff use Al daily in their current roles?
    How can Al enhance access to care for patients, and how to make that experience seamless?
    How can Al offer new workplace platforms and tools to increase efficiency?
    Some of the top managers are worried about a change in the way of working, and if it will achieve the goals. Many are not confident that the company's risk management processes are adequate for a company-wide integration of generative Al. There are also questions from staff about whether enough specific guidelines and polices have been put in place for responsible use of Al.
    Refer to the scenario
    You have been assigned to the architecture development and asked how to address the concerns and manage risk for the project. How do you begin?
    Based on the TOGAF standard which of the following is the best answer?
  • Question 18

    Please read this scenario prior to answering the question
    You are employed as an Enterprise Architect at a large technology company with diverse business lines. The company has multiple divisions, engaged in mobile, e-commerce, cloud computing services, and a social network.
    The company has an established Enterprise Architecture (EA) practice based on the TOGAF standard, including the TOGAF ADM. The EA program is sponsored by the Chief Information Officer (CIO). The use of EA has enabled the company to gain valuable insights into different parts of the business. One of the primary goals in the EA program charter is to coordinate efforts between the teams in each division. This has made sure that the mobile, e-commerce, cloud, and social media initiatives remain aligned with business strategy.
    The practice has an established Architecture Capability and uses iteration for architecture development. The iterative approach is well-suited for modern digital transformation initiatives, where the company must adapt quickly to new business and market challenges. In addition to the EA program, the company uses several management frameworks, including business planning, project/portfolio management, and operations management.
    The company is growing rapidly. A consequence of this rapid growth has been the proliferation of multiple IT solutions, with architecture giving way to growth. The company appears to be failing to architect its growth.
    Several systems have proved unreliable with some major outages, including the e-commerce system being offline for eight hours at the start of the holiday sales period, as well as the cloud computing services outage, which took down several popular websites. The service management organization within the company has blamed the outages on misalignment of the IT solutions.
    The Governing Board has raised concerns about the outages. As a consequence, the CEO has asked for better reporting and management of the IT portfolio. The task has been assigned to the EAteam, with a constraint to maintain business as usual.
    Refer to the Scenario
    You have been asked to assess the IT solutions to determine where problems are occurring and where change is needed.
    Based on the TOGAF standard, which of the following is the best answer?
  • Question 19

    Please read this scenario prior to answering the question
    You are employed as an Enterprise Architect at a healthcare company. The company operates over 250 hospitals and is dedicated to transforming healthcare with new ideas and advancements. The company has multiple divisions include surgery centers, freestanding emergency departments, urgent care clinics, and physician practices. They also develop and supply a range of products and services, many with specialized systems and clinical needs.
    The company's Enterprise Architecture (EA) department has been operating for several years and has mature, well-developed architecture governance and development processes following the TOGAF standard. The Chief Information Officer (CIO) is the sponsor of the Enterprise Architecture program.
    Healthcare is a highly controlled sector, and the company must maintain robust security practices to keep patient information private and prevent data breaches. The company shares electronic health records with multiple providers and has standardized its medical coding for billing and reporting.
    Many of the company's rivals have begun using Artificial Intelligence (Al) in their operations, and the indications are that this will be transformative for healthcare delivery. This is something the EA department has been interested in for a while, and they had recently submitted an architecture Change Request which was approved. As a result, the CIO has approved a Request for Architecture Work to implement Al-based solutions in the company.
    The project has been established and you have been assigned to work on it. Stakeholders, concerns, and business requirements have been identified. The stakeholders have made it clear that timely implementation of changes can be life-critical, and that changes should be focused on improving patient outcomes. They also have a concern about disruption due to the changes and require the systems to preserve clinical data access and maintain critical life-support systems during any outages.
    The scope of what is inside and what is outside the architecture efforts has now been confirmed. Your task is to revisit and review the Architecture Principles, as they form part of the constraints on architecture work.
    Refer to the scenario
    The EA team leader has asked you to explain which Architecture Principles are most relevant for this project.
    Based on the TOGAF standard, which of the following is the best answer?
    [Note: You should assume the company follows the example set of Architecture Principles that are provided in the TOGAF standard, ADM Techniques, Architecture Principles chapter.]
  • Question 20

    Scenario
    You are working as an Enterprise Architect within an Enterprise Architecture (EA) team at a large government agency. The agency has multiple divisions.
    The agency has a well-established EA practice and follows the TOGAF standard as its method for architecture development. Along with the EA program, the agency also uses various management frameworks, including business planning, project/portfolio management, and operations management. The EA program is sponsored by the Chief Information Officer (CIO), who has actively promoted architecting with agility within the EA department as her preferred approach for projects.
    The government has mandated that the agency prepare themselves for an Artificial Intelligence (AI)-first world, which they have called their "AI-first" plan. As a result, the agency is looking to determine the impact and role that AI will play moving forward. The CIO has approved a Request for Architecture Work to look at how AI can be used for services across the agency. She has noted that digital platforms will be a priority for investment in order to scale the AI applications planned. Using AI to automate tasks and make things run smoother is seen as a big advantage. Process automation and improved efficiency from manual, repetitive activities have been identified as the key benefits of applying generative AI to their agency's business. This will include back-office automation, for example, for help center agents who receive hundreds of email inquiries. This should also improve services for citizens by making them more efficient and personalized, tailored to each individual's needs.
    Many of the agency leaders are worried about relying too much on AI. Some leaders think their employees will need to learn new skills. Some employees are worried they might lose their jobs to AI. Other leaders worry about security and cyber resilience in the digital platforms needed for AI to be successful.
    The leader of the Enterprise Architecture team has asked for your suggestions on how to address the concerns, and how to manage the risks of a new architecture for the AI-first project.
    Based on the TOGAF standard, which of the following is the best answer?