Please read this scenario prior to answering the question
You are employed as an Enterprise Architect at a bank. The bank is well established and maintains a large networks of branches and ATMs, offering in-person services alongside some basic digital options. The bank has several divisions, including retail banking, commercial banking, investment banking, legal and compliance.
The bank has an established Enterprise Architecture (EA) practice and has adopted the TOGAF standard for use in its architecture work. The bank uses EAto organize their entire operating model, including people, processes, data, and technol ogy. The EA practice is federated, which allows some interoperability and information sharing between the divisions yet permits partially independent activity. You are working in the EA team within the retail banking division.
The bank faces competition from new online-only banks, known as challenger banks. These banks have no physical locations. They are able to offer competitive interest rates and lower fees due to reduced overheads.
A recent survey has shown that these challenger banks are popular with younger consumers, 62% of 18-24- year-olds prefer them over traditional banks.
To maintain its position, the bank has approved a project to compete with the challenger banks and plans to launch its own competing products. This includes investing heavily in mobile apps, Al-powered chatbots and online services.
The retail banking division has setup a new organization within it, to act as a virtual startup. You have been assigned to the EA project within the new organization. A high-level vision for a new line of competing products has been completed. Key focus areas for the business architecture included business capability mapping, value stream development, and customer journey mapping. Target architectures for business, information systems, and technology have been completed.
A greenfield implementation strategy has been chosen, so the team will focus on building something entirely new rather than modifying existing systems.
Refer to the scenario
You have been asked to draft the Architecture Roadmap.
Based on the TOGAF standard which of the following is the best answer?

• A. Confirm the most appropriate implementation strategy, which is to build completely new digital banking systems. Identify factors that should be considered when planning the implementation. Identify any gaps across all architecture domains and for each gap, identify a proposed solution and classify it as new development, purchased solution, or based on an existing product. Select appropriate solutions that are competitive. Consider regulatory implications, which are especially important for banking. Ensure solutions address stakeholder requirements.
• B. Draw up a matrix documenting the architecture domain, gaps between the baseline and target architectures, potential solutions to address each gap, and the dependencies between solutions. Identify necessary transition architectures that will be intermediate steps towards the Target Architecture.
  Provide a project and portfolio breakdown of implementation, including allocation of work packages to project and portfolio, capabilities delivered by projects, milestones and timing. For each project, include the project charter, the included work packages, descriptions for the business value and risk.
• C. Document the strategic rationale for the approach, explaining why a completely new implementation is preferred over revolutionary or evolutionary approaches. Select a quick win implementation approach focusing on high-value components first. Logically group changes into well-defined work packages that align perfectly with the target state. Document work packages business value. Define intermediate states between the baseline and target architectures. Consolidate work packages and transition architectures into a timeline showing progression from baseline to target architecture.
• D. Generate a comprehensive plan that integrates all projects, activities, dependencies, and impacts.
  Coordinate the Implementation and Migration Plan with the enterprise ' s other change activities.
  Ensure key stakeholders understand the business value and cost of work packages and transition architectures. For each work package, document business value, risks, issues, assumptions, dependencies, resource requirements, and costs. Visually represent how each implementation project relates to the overall transformation. Complete the roadmap.

You are employed as an Enterprise Architect within an Enterprise Architecture (EA) team at an environmental agency. The agency has multiple divisions, and is responsible for overseeing environmental protection, regulation, and conservation efforts.
The agency has a well-established EA practice and follows the TOGAF standard as its method for architecture development. Along with the EA program, the agency also uses various management frameworks, including business planning, project/portfolio management, and operations management. The EA program is sponsored by the Chief Information Officer (CIO), who has actively promoted architecting with agility within the EA department as the preferred approach for projects.
The agency is preparing itself for a world where Artificial Intelligence (Al) is widely adopted. As a result, the agency is looking to determine the impact and role that Al will play moving forward.
The CIO has approved a Request for Architecture Work to look at how Al can be used for services across the agency. She has noted that digital platforms will be a priority for investment in order to scale the planned Al applications. Using Al to automate tasks and make things run smoother is seen as a big advantage. Process automation, and improved efficiency from manual, repetitive activities has been identified as the key benefits of applying generative Al to their agency ' s business. This will include back-office automation, for example, for help center agents who receive hundreds of email enquiries. This should also improve services for their customers by making them more efficient and personalized, tailored to each individual's needs.
Many of the agency leaders are worried about relying too much on Al. Some leaders think their employees will need to learn new skills. Some employees are worried they might lose their jobs to Al. Other leaders worry about security and cyber resilience in the digital platforms needed for Al to be successful.
Refer to the scenario
The EA team leader has asked how to address the concerns, and how to manage the risks of a new architecture for the project.
Based on the TOGAF standard which of the following is the best answer?

• A. You recommend that the key stakeholders be formally identified. This should include those who will be most helpful for the change to be successful. A Communication Plan should be made to address their needs. This plan should include a report that summarizes the key features of the architecture based on stakeholder requirements and addressing concerns. You meet with each key stakeholder to make sure their concerns are being addressed. You make sure that the architecture being developed clearly addresses risk management.
• B. You recommend an assessment of the power, influence, and interest of key individuals affected by the project. This includes documenting the positions, concerns, issues, and cultural factors of each interest group. This information will shape how the architecture is presented and explained. The concerns and relevant views can be defined for each group and recorded in the Architecture Vision document. The requirements for addressing risk should be recorded in the Architecture Requirements Specification and checked through regular assessments and feedback.
• C. You recommend creating an Organization Map to display the links between different parts of the agency. This will help the EA team to find and involve all areas of the agency impacted by this strategic change. Multiple business models should then be created that can be applied to Al related projects. A meeting will be held with the stakeholders to teach them how to interpret the models and see how their concerns are being addressed. Risk will be managed as part of the Security Architecture development.
• D. You recommend conducting an analysis that separates the different types of stakeholders into groups.
  They can be put into categories including corporate functions, end-user organization, project organization, systems, and external. Models should be developed for each stakeholder category to ensure that that all the necessary information and details are considered. A meeting should be held with the stakeholders to verify that their concerns have been addressed. Risk management will be considered during the Implementation Governance phase.

Scenario:
You are working as an Enterprise Architect within a company providing legal services. The company operates in many countries and has a complicated structure. Every office must follow the local regulations in their country.
The company's Enterprise Architecture (EA) department has been operating for several years and has mature, well-developed architecture governance and development processes based on the TOGAF standard. In addition to the EA program, the company has several management frameworks, including business planning, project/portfolio management, and operations management. The Architecture Board includes representatives from all parts of the company.
The Chief Information Officer (CIO) is the sponsor of the Enterprise Architecture program. The CIO has actively encouraged architecting with agility within the EA department as the preferred approach for projects.
The CIO has given approval for a Request for Architecture Work to explore the adoption of an AI-powered system for managing legal cases and financial processes.
Senior management has become more concerned about business performance, especially with the advancements in Artificial Intelligence (AI). Many of the company's competitors have started using AI to assist with legal strategies, streamline processes, and boost productivity. One of the most important benefits AI has for the business is its ability to increase accuracy and minimize mistakes.
Some of the top managers are worried about a change in the way of working, and if it will achieve the business goals. Their staff also fear that management will use the AI system to measure their performance.
The CIO wants to know how to address these concerns and reduce risks.
The new system is expected to guide legal professionals and analysts on which tasks to focus on. The main goals are to improve productivity and make better use of staff. In addition, the CIO hopes these changes will lead to higher customer satisfaction.
Refer to the scenario:
You have been asked to respond to the Chief Information Officer (CIO) recommending an approach that would enable the development of an architecture that addresses the concerns of the top managers and the multiple branches in different parts of the company.
Based on the TOGAF standard, which of the following is the best answer?

• A. You recommend that an analysis of the stakeholders is undertaken. This will allow the architects to define groups of partners (the stakeholders) who have common concerns and include development of a Stakeholder Map. The concerns and relevant views should then be defined for each group and recorded in the Architecture Vision document. To reduce risk, you include a requirement that there be progressive development of the target architecture to get regular feedback.
• B. You recommend creation of a set of business models that can be applied uniformly across all AI-related architecture projects. These should be developed in a portable format to ensure maximum portability across the many tools used in the firm. Each architecture should then be defined based on this fixed set of models. All concerned stakeholders can then examine the models to ensure that their needs have been addressed.
• C. You recommend that models be created for each of the Business, Application, and Technology architectures. These can be used to ensure that the system will be compliant with the local regulations for each operating entity. This ensures that all necessary data and detail is addressed. A formal review should be held with the stakeholders to verify that their concerns have been properly addressed by the models.
• D. You recommend that a Communications Plan be created to address the key stakeholders, particularly influential partners. This plan should include a report summarizing the key features of the architecture with respect to each location and reflect the stakeholders' requirements. You will check with each key stakeholder that their concerns have been addressed. Risk mitigation should be explicitly addressed as a component of the architecture being developed.

You are working as an Enterprise Architect at a large company. The company runs many retail stores as well as an online marketplace that allows hundreds of brands to partner with the company. The company has a mature Enterprise Architecture (EA) practice and uses the TOGAF standard for its architecture development method. The EA practice is involved in all aspects of the business, with oversight provided by an Architecture Board with representatives from different parts of the business. The EA program is sponsored by the Chief Information Officer (CIO).
Many of the stores remain open all day and night. Each store uses a standard method to track sales and inventory, which involves sending accurate, timely sales data to a central AI-based inventory management system that can predict demand, adjust stock levels, and automate reordering. The central inventory management system is housed at the company's central data center.
The company has acquired a major rival. The Chief Executive Officer (CEO) believes that the merger will enable growth through combined offerings and cost savings. The decision has been made to fully integrate the two organizations, including merging retail operations and systems. Duplicated systems will be replaced with one standard retail management system. The CIO expects significant savings from these changes across the newly merged company.
The rival company has successfully implemented the use of hand-held devices within stores for both customers and staff, which has increased satisfaction due to time savings. The CIO has approved the rollout of these devices to all stores but has stated that training should be brief, as there are many part-time employees.
You have been asked to confirm the most relevant architecture principles for this transformation. Based on the TOGAF Standard, which of the following is the best answer?

• A. Common Vocabulary and Data Definitions, Compliance with the Law, Requirements Based Change, Responsive Change Management, Data Security
• B. Maximize Benefit to the Enterprise, Common Use Applications, Data is an Asset, Responsive Change Management, Technology Independence
• C. Control Technical Diversity, Interoperability, Data is an Asset, Data is Shared, Business Continuity
• D. Common Use Applications, Data is an Asset, Data is Accessible, Ease of Use, Business Continuity

Please read this scenario prior to answering the question
You have been appointed as senior architect working for an autonomous driving technology development company. The mission of the company is to build an industry leading unified technology and software platform to support connected cars and autonomous driving.
The company uses the TOGAF Standard as the basis for its Enterprise Architecture (EA) framework.
Architecture development within the company follows the purpose-based EA Capability model as described in the TOGAF Series Guide: A Practitioners ' Approach to Developing Enterprise Architecture Following the TOGAF ADM.
An architecture to support strategy has been completed defining a long-range Target Architecture with a roadmap spanning five years. This has identified the need for a portfolio of projects over the next two years.
The portfolio includes development of travel assistance systems using swarm data from vehicles on the road.
The current phase of architecture development is focused on the Business Architecture which needs to support the core travel assistance services that the company plans to provide. The core services will manage and process the swarm data generated by vehicles, paving the way for autonomous driving in the future.
The presentation and access to different variations of data that the company plans to offer through its platform poses an architecture challenge. The application portfolio needs to interact securely with various third-party cloud services, and V2X (Vehicle-to-Everything) service providers in many countries to be able to manage the data at scale. The security of V2X is a key concern for the stakeholders. Regulators have stated that the user ' s privacy be always protected, for example, so that the drivers ' journey cannot be tracked or reconstructed by compiling data sent or received by the car.
Refer to the scenario
You have been asked to describe the risk and security considerations you would include in the current phase of the architecture development?
Based on the TOGAF standard which of the following is the best answer?

• A. You will perform a qualitative risk assessment for the data assets exchanged with partners. This will deliver a set of priorities, high to medium to low, based on identified threats, the likelihood of occurrence, and the impact if it did occur. Using the priorities, you would then develop a Business Risk Model which will detail the risk strategy including classifications to determine what mitigation is enough.
• B. You will focus on the relationship with the third parties required for the travel assistance systems and define a trust framework. This will describe the relationship with each party. Digital certificates are a key part of the framework and will be used to create trust between parties. You will monitor legal and regulatory changes across all the countries to keep the trust framework in compliance.
• C. You will create a security domain model so that assets with the same level can be managed under one security policy. Since data is being shared across partners, you will establish a security federation to include them. This would include contractual arrangements, and a definition of the responsibility areas for the data exchanged, as well as security implications. You would undertake a risk assessment determining risks relevant to specific data assets.
• D. You will focus on data quality as it is a key factor in risk management. You will identify the datasets that need to be safeguarded. For each dataset, you will assign ownership and responsibility for the quality of data needs. A security classification will be defined and applied to each dataset. The dataset owner will then be able to authorize processes that are trusted for a certain activity on the dataset under certain circumstances.