OGEA-103無料問題集「The Open Group TOGAF Enterprise Architecture Combined Part 1 and Part 2」

質問 1

Please read this scenario prior to answering the question
Your role is that of a senior architect, reporting to the Chief Enterprise Architect, at a medium-sized company with 400 employees. The nature of the business is such that the data and the information stored on the company systems is their major asset and is highly confidential.
The company employees travel extensively for work and must communicate over public infrastructure using message encryption, VPNs, and other standard safeguards. The company has invested in cybersecurity awareness training for all its staff. However, it is recognized that even with good education as well as system security, there is a dependency on third-parly suppliers of infrastructure and software.
The company uses the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice. The CTO is the sponsor of the activity.
The Chief Security Officer (CSO) has noted an increase in ransomware (malicious software used in ransom demands) attacks on companies with a similar profile. The CSO recognizes that no matter how much is spent on education, and support, it is likely just a matter of time before the company suffers a significant attack that could completely lock them out of their information assets.
A risk assessment has been done and the company has sought cyber insurance that includes ransomware coverage. The quotation for this insurance is hugely expensive. The CTO has recently read a survey that stated that one in four organizations paying ransoms were still unable to recover their data, while nearly as many were able to recover the data without paying a ransom. The CTO has concluded that taking out cyber insurance in case they need to pay a ransom is not an option.
Refer to the scenario
You have been asked to describe the steps you would take to improve the resilience of the current architecture?
Based on the TOGAF standard which of the following is the best answer?

（A）You would ensure that the company has in place up-to-date processes for managing change to the current Enterprise Architecture. Based on the scope of the concerns raised you recommend that this be managed at the infrastructure level. Changes should be made to the baseline description of the Technology Architecture. The changes should be approved by the Architecture Board and implemented by change management techniques.

（B）You would request an Architecture Compliance Review with the scope to examine the company's resilience to ransomware attacks. You would identify the departments involved and have them nominate representatives. You would then tailor checklists to address the requirement for increased resilience. You would circulate to the nominated representatives for them to complete. You would then review the completed checklists, identifying and resolving issues. You would then determine and present your recommendations.

（C）You would monitor for technology changes from your existing suppliers that could improve resilience.
You would prepare and run a disaster recovery planning exercise for a ransomware attack and analyze the performance of the current Enterprise Architecture. Using the findings, you would prepare a gap analysis of the current Enterprise Architecture. You would prepare change requests to address identified gaps. You would add the changes implemented to the Architecture Repository.

（D）You would determine business continuity requirements, and undertake a gap analysis of the current Enterprise Architecture. You would make recommendations for change requirements to address the situation and create a change request. You would manage a meeting of the Architecture Board to assess and approve the change request. Once approved you would produce a new Request for Architecture Work to activate an ADM cycle to carry out a project to define the change.

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Exhibit
Consider the illustration showing an architecture development cycle Which description matches the phase of the ADM labeled as item 1?

（A）Conducts implementation planning for the architecture defined in previous phases

（B）Provides architectural oversight for the implementation

（C）Operates the process of managing architecture requirements

（D）Establishes procedures for managing change to the new architecture

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 3

Please read this scenario prior to answering the question
Your role is that of a consultant to the Lead Enterprise Architect to an international supplier of engineering services and automated manufacturing systems. It has three manufacturing plants where it assembles both standard and customized products for industrial production automation. Each of these plants has been operating its own planning and production scheduling systems, as well as applications and control systems that drive the automated production line.
The Enterprise Architecture department has been operating for several years and has mature, well-developed architecture governance and development processes that are based on the TOGAF Standard. The CIO sponsors the Enterprise Architecture.
During a recent management meeting, a senior Vice-President highlighted an interview where a competitor company's CIO is reported as saying that their production efficiency had been improved by replacing multiple planning and scheduling systems with a common Enterprise Resource Planning (ERP) system located in a central data center. Some discussion followed, with the CIO responding that the situations are not comparable, and the current architecture is already optimized.
In response, the Architecture Board approved a Request for Architecture Work covering the investigations to determine if such an architecture transformation would lead to improvements in efficiency. You have been assigned to support the architecture team working on this project.
A well-known concern of the plant managers is about the security and reliability of driving their planning and production scheduling from a remote centralized system. Any chosen system would also need to support the current supply chain network consisting of local partners at each of the plants.
Refer to the scenario
You have been asked to explain how you will initiate the architecture project.
Based on the TOGAF Standard, which of the following is the best answer?

（A）You would conduct a pilot project that will enable vendors to demonstrate potential off-the-shelf solutions that address the concerns of the stakeholders. Running a pilot project will save time and money later in the process. Based on the findings of that pilot project, a complete set of requirements can then be developed that will drive the evolution of the architecture. Once the requirements are completed, a formal stakeholder review should be held, and permission sought to proceed to develop the target architecture.

（B）You would research vendor literature and conduct a series of briefings with vendors that are on the current approved supplier list. Based on the findings from the research, you would define a preliminary Architecture Vision including summary views, high-level requirements, and high-level definitions of the baseline and target environments from a business, information systems, and technology perspective. You would then use that to build consensus among the key stakeholders.

（C）You would hold a series of interviews at each of the manufacturing plants using the business scenarios technique. This will allow you to understand the systems and integrations with local partners. You would use stakeholder analysis to identify key players in the engagement, and to understand their concerns. You will then identify and document the key high-level stakeholder requirements for the architecture. You will then generate high level definitions of the baseline and target architectures.

（D）You would develop baseline and target Architectures for each of the manufacturing plants, ensuring that the views corresponding to selected viewpoints address key concerns of the stakeholders. A business case, together with performance metrics and measures should be defined to ensure the architecture meets the business needs. A consolidated gap analysis between the architectures will then validate the approach and determine the capability increments needed to achieve the target state.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 4

Please read this scenario prior to answering the question
You are working as an Enterprise Architect within a healthcare and life science company. The company is a leading player in its industry, dedicated to transforming healthcare with new ideas and advancements. The company has multiple divisions that cover different aspects of the business.
The company's Enterprise Architecture (EA) department has been operating for several years and has mature, well-developed architecture governance and development processes following the TOGAF Standard. In addition to the EA program, the company has a number of management frameworks in use.
The Architecture Board includes representatives from each division of the company.
Many of the company's rivals have begun utilizing Artificial Intelligence (Al) in their operations, and the indications are that this will be transformative for healthcare delivery. This is something the EA department has been interested in for a while, and they had recently submitted an architecture Change Request which was approved. As a result, the CIO has approved a Request for Architecture Work to investigate the implementation of Al in the company.
Areas for evaluation include:
How can staff use Al daily in their current role?
How Al can enhance access to care for patients, and how to make that experience seamless?
How Al can offer new workplace platforms and tools to increase efficiency?
Some of the top managers are worried about a change in the way of working, and if it will achieve the goals.
Many are not confident that the company's risk management processes are adequate for a company-wide integration of generative Al. There are also questions from staff about whether enough specific guidelines and polices have been put in place for responsible use of Al.
The Chief Information Officer (CIO) is the sponsor of the Enterprise Architecture program. The CIO has actively encouraged architecting with agility within the EA department as her preferred approach for projects.
The CIO wants to know how to address these concerns and reduce risks.
Refer to the scenario
You have been tasked with starting the architecture development. How do you begin?
Based on the TOGAF standard which of the following is the best answer?

（A）You recommend that an analysis of the stakeholders is undertaken. This will allow the architects to define groups of partners (the stakeholders) who have common concerns and include development of a Stakeholder Map. The concerns and relevant views should then be defined for each group and recorded in the Architecture Vision document. To mitigate risk, you include a requirement that there be progressive development of the target architecture to ensure there is regular feedback.

（B）You recommend that a Communications Plan be created to address the key stakeholders, that is the most powerful and influential partners. This plan should include a report that summarizes the key features of the architecture with respect to each location and reflects the stakeholders' requirements.
You will check with each key stakeholder that their concerns are being addressed. Risk mitigation should be explicitly addressed as a component of the architecture being developed.

（C）You recommend that models be created for the Draft Business, Data, Application, and Technology Architectures. These can be used to ensure that the system will be compliant with the local regulations for each division. Together with the problem description, and requirements, this ensures that all the necessary data and detail is addressed. A formal review should be held with the stakeholders to verify that their concerns have been properly addressed by the models.

（D）You recommend creation of a set of business models that can be applied uniformly across all Al- related architecture projects. These should be developed in the portable format to ensure maximum portability across the many tools used in the firm. Each architecture should then be defined based on this fixed set of models. All concerned parties can then examine the models to ensure that their needs have been addressed.

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 5

Which statement best describes iteration and the ADM?

（A）The ADM is sequential Iteration is applied within phases

（B）The level of detail is defined once and applies to all iterations

（C）The ADM is iterative, over the whole process between phases and within phases

（D）The ADM is iterative within the first cycle and then between phases

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 6

Please read this scenario prior to answering the question
You have been appointed as senior architect working for an autonomous driving technology development company. The mission of the company is to build an industry leading unified technology and software platform to support connected cars and autonomous driving.
The company uses the TOGAF Standard as the basis for its Enterprise Architecture (EA) framework.
Architecture development within the company follows the purpose-based EA Capability model as described in the TOGAF Series Guide: A Practitioners'Approach to Developing Enterprise Architecture Following the TOGAF ADM.
An architecture to support strategy has been completed defining a long-range Target Architecture with a roadmap spanning five years. This has identified the need for a portfolio of projects over the next two years.
The portfolio includes development of travel assistance systems using swarm data from vehicles on the road.
The current phase of architecture development is focused on the Business Architecture which needs to support the core travel assistance services that the company plans to provide. The core services will manage and process the swarm data generated by vehicles, paving the way for autonomous driving in the future.
The presentation and access to different variations of data that the company plans to offer through its platform poses an architecture challenge. The application portfolio needs to interact securely with various third-party cloud services, and V2X (Vehicle-to-Everything) service providers in many countries to be able to manage the data at scale. The security of V2X is a key concern for the stakeholders. Regulators have stated that the user's privacy be always protected, for example, so that the drivers' journey cannot be tracked or reconstructed by compiling data sent or received by the car.
Refer to the scenario
You have been asked to describe the risk and security considerations you would include in the current phase of the architecture development?
Based on the TOGAF standard which of the following is the best answer?

（A）You will focus on data quality as it is a key factor in risk management. You will identify the datasets that need to be safeguarded. For each dataset, you will assign ownership and responsibility for the quality of data needs. A security classification will be defined and applied to each dataset. The dataset owner will then be able to authorize processes that are trusted for a certain activity on the dataset under certain circumstances.

（B）You will focus on the relationship with the third parties required for the travel assistance systems and define a trust framework. This will describe the relationship with each party. Digital certificates are a key part of the framework and will be used to create trust between parties. You will monitor legal and regulatory changes across all the countries to keep the trust framework in compliance.

（C）You will create a security domain model so that assets with the same level can be managed under one security policy. Since data is being shared across partners, you will establish a security federation to include them. This would include contractual arrangements, and a definition of the responsibility areas for the data exchanged, as well as security implications. You would undertake a risk assessment determining risks relevant to specific data assets.

（D）You will perform a qualitative risk assessment for the data assets exchanged with partners. This will deliver a set of priorities, high to medium to low, based on identified threats, the likelihood of occurrence, and the impact if it did occur. Using the priorities, you would then develop a Business Risk Model which will detail the risk strategy including classifications to determine what mitigation is enough.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 7

Which of the following supports the need to govern Enterprise Architecture?

（A）The Architecture Project mandates the governance of the target architecture

（B）The TOGAF standard cannot be used without executive governance

（C）Best practice governance enables the organization to control value realization

（D）The Stakeholders preferences may go beyond the architecture project scope and needs control

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 8

Which of the following best summarizes the purpose of Enterprise Architecture?

（A）Controlling the bigger changes.

（B）Taking major improvement decisions.

（C）Guiding effective change.

（D）Governing the Stakeholders.

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 9

Consider the following descriptions of deliverables consumed and produced across the TOGAF ADM cycle.
* General rules and guidelines, intended to be enduring and seldom
amended, that inform and support the way in which an organization sets
about fulfilling its mission
* The joint agreements between development partners and sponsors on the deliverables, quality, and fitness-for-purpose of an architecture.
* A document that is sent from the sponsoring organization to the
architecture organization to trigger the start of an architecture
development cycle
* A set of quantitative statements that outline what an implementation
project must do in order to comply with the architecture.
Which deliverables match these descriptions?

（A）1 Architecture Principles -2 Architecture Contracts - 3 Request for Architecture Work - 4 Architecture Requirements Specification

（B）1 Architecture Contracts - 2 Architecture Requirements Specification - 3 Architecture Vision - 4 Architecture Principles

（C）1 Architecture Requirements Specification -2 Architecture Principles - 3 Architecture Vision - 4 Architecture Contracts

（D）1 Architecture Principles -2 Architecture Contracts - 3 Architecture Requirements Specification-4 Request for Architecture Work

正解：A 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 10

Complete the following sentence. In the ADM, documents which are under development and have not undergone any formal review and approval process are called______ Documents which have been reviewed and approved are called ______

（A）"draft"- "finalized"

（B）"concept" - "deliverable"

（C）"Version 0.1" - "Version 1.0"

（D）"draft" - "approved"

正解：D 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

OGEA-103 無料問題集「The Open Group TOGAF Enterprise Architecture Combined Part 1 and Part 2」

弊社を連絡する

関連リンク

トップ試験