OGEA-102 Exam Questions & Answers

Comprehensive and Detailed Step-by-Step Explanation

Context of the Scenario

The company is in the process of delivering requested architectures to support the introduction of digital products and services. The Business Architecture is sufficiently defined, and the focus is on developing the Information Systems and Technology Architectures.

TOGAF emphasizes breaking down large, complex transformation programs into manageable projects, focusing on dependencies, risks, trade-offs, and sequencing of efforts. Based on the scenario, the company must deal with:

Data privacy and residency compliance across different regions.

Re-use of existing architecture for efficiency.

Alignment of digital services with a global roadmap.

The activity described aligns with ADM Phases B (Business Architecture), C (Information Systems Architecture), and D (Technology Architecture), with a focus on delivering architectures for implementation.

Option Analysis

Option A:

Strengths:

Refers to developing high-level architecture descriptions and identifying reference architectures and candidate building blocks, which align with ADM Phases B, C, and D.

Addresses feasibility analysis, trade-offs, and stakeholder engagement, which are part of architecture development and decision-making in TOGAF.

Ensures that the architecture descriptions are resource-conscious, including cost and value analysis, dependencies, risks, and synergies between projects.

Conclusion: Correct, as it provides a complete approach to organizing the work to deliver architectures while adhering to TOGAF principles.

Option B:

Strengths:

Suggests creating architecture descriptions for the Application, Data, and Technology Architectures, which are necessary for delivering requested architectures.

Addresses readiness assessments and the fitness of solutions.

Weaknesses:

Emphasizes looking outside the company and studying other companies' models, which is not necessarily aligned with TOGAF unless justified by specific gaps.

Skips essential TOGAF steps like feasibility analysis and detailed stakeholder engagement.

Conclusion: Incorrect, as it places undue emphasis on external research instead of leveraging TOGAF's structured ADM.

Option C:

Strengths:

Suggests reviewing the Architecture Vision and determining scope, which aligns with TOGAF principles.

Proposes preparing an Architecture Roadmap and involving the Architecture Board for review.

Weaknesses:

Does not cover important elements such as candidate building blocks, feasibility analysis, or stakeholder engagement.

Suggests starting the project prematurely without proper sequencing or risk trade-offs.

Conclusion: Incorrect, as it skips key steps and lacks a structured approach to dependencies and resource management.

Option D:

Strengths:

Suggests revising the Architecture Vision and conducting a Stakeholder Analysis, which aligns with Phase A of the ADM.

Weaknesses:

Returning to Phase A is not required here, as the Architecture Vision has already been defined. Revising the vision at this stage indicates a step backward.

Lacks focus on feasibility analysis, dependencies, and sequencing, which are the immediate needs in this phase.

Conclusion: Incorrect, as it unnecessarily revisits earlier ADM phases instead of progressing.

TOGAF Reference

ADM Phases B, C, D: Emphasizes developing detailed architectures, identifying candidate building blocks, and addressing dependencies, risks, and resource needs (TOGAF 9.2, Chapters 8-10).

Architecture Roadmap and Feasibility Analysis: Guides sequencing and trade-offs for implementation (TOGAF 9.2, Section 12.4).

Stakeholder Engagement: Critical for ensuring alignment and feasibility (TOGAF 9.2, Section 24.2).

Decision-Making and Trade-offs: TOGAF emphasizes documenting risks and trade-offs as part of feasibility analysis (TOGAF 9.2, Section 6.4.1).

The scenario clearly states that:

The overall objective is known,

BUT the EA team is expected to define the scope, shared vision, and requirements,

The company uses an iterative approach,

The CEO wants repurpose and reuse rather than replace,

This is a major strategic shift (new markets, new products, new crop mix).

According to the TOGAF standard, when the problem must be understood, and scope, vision, and requirements are not yet defined, the correct starting point is Phase A: Architecture Vision, using an iteration cycle.

This is also consistent with the ''baseline-first'' approach recommended in the TOGAF Series Guides for situations where:

the business direction is known but high-level,

detailed impacts must be discovered,

and the organization wants to reuse existing capabilities rather than replace them.

Option B is the only answer that:

Begins by understanding the problem,

Defines the structure of the change,

Uses iteration cycles starting with a baseline-first approach,

Leads into transition planning,

Supports clarification of the shared vision and requirements,

Fits the CIO's instruction to ''define the scope, shared vision, and requirements.''

This matches exactly what TOGAF prescribes in early-cycle Architecture Vision and initial iterations.

In TOGAF, creating a Business Scenario is a foundational step in defining and understanding the business problem, especially for complex transformations involving multiple stakeholders and systems, such as in this scenario. This method aligns with Phase A (Architecture Vision) of the TOGAF Architecture Development Method (ADM). Here's why this approach is the most effective:

Understanding Business Requirements:A Business Scenario provides a structured way to capture and analyze the business requirements, stakeholder concerns, and the contextual elements related to the problem. In this scenario, the company faces challenges in integrating newly acquired companies with existing operations, which includes complex stakeholder concerns across different functional areas. Developing a Business Scenario allows the EA team to break down these complexities into identifiable and manageable parts.

Risk Evaluation and Management:By using the Business Scenario approach, the EA team can not only define the requirements but also assess associated risks systematically. TOGAF emphasizes the importance of risk management through identifying potential risks, evaluating their impact, and defining strategies for handling these risks. The process includes assessing how risks can be avoided, transferred, or reduced---a necessary step in large-scale transformations to ensure that risks are proactively managed.

Residual Risks and Governance:Any risks that cannot be fully resolved should be identified as residual risks and escalated to the Architecture Board, which is aligned with TOGAF's governance approach. The Architecture Board's role in TOGAF is to provide oversight and make critical decisions on risks that exceed the control of the EA team. This ensures that unresolved risks are managed at the appropriate level of the organization.

Alignment with TOGAF ADM Phases:The Business Scenario approach directly aligns with the Preliminary and Architecture Vision phases of the TOGAF ADM, which focuses on establishing a baseline understanding of the business context and the strategic transformation required. The detailed understanding of requirements, stakeholder concerns, and risks identified here will guide the subsequent phases of the ADM, including Business Architecture and Information Systems Architecture.

TOGAF Reference (Section 2.6, ADM Techniques):TOGAF provides guidelines on the creation of Business Scenarios as part of ADM Techniques, highlighting the importance of defining a business problem comprehensively to ensure successful transformation. This method includes identification of stakeholders, business requirements, and associated risks, which aligns well with the company's need for strategic and systematic integration of new business units.

By utilizing a Business Scenario, the EA team ensures that all aspects of the transformation are well understood, risks are identified early, and residual risks are managed effectively, aligning with the company's strategic objectives and the TOGAF framework's guidance on risk management and stakeholder alignment.

The correct approach is rooted in Phase A: Architecture Vision and the Requirements Management process of the TOGAF ADM (Architecture Development Method).

Stakeholder Management (Phase A): According to the TOGAF standard, one of the first steps in Phase A is to identify stakeholders, their issues, and concerns. The scenario specifically highlights conflicting concerns: efficiency gains vs. job security and cyber resilience. A core TOGAF technique is the assessment of power, influence, and interest. By documenting these 'positions, concerns, and cultural factors,' the Enterprise Architect can tailor the Communication Plan and the Architecture Vision to ensure buy-in. This is vital for 'architecting with agility,' as it ensures the human and organizational factors are integrated into the design early on.

Defining Views and Viewpoints: TOGAF specifies that the EA team should identify the relevant views for each stakeholder group. For example, a leader worried about security needs a Security View, while an employee worried about job loss needs a Business/Human Resource View. Recording these in the Architecture Vision document ensures that the high-level goals of the AI project align with stakeholder expectations.

Risk Management and Requirements: In TOGAF, risk is not just a technical issue to be handled in Phase G (Implementation Governance) or limited to Security Architecture. It is an integral part of the Architecture Requirements Specification. By recording risk requirements early and using 'regular assessments and feedback,' the agency follows a proactive risk management posture. This aligns with the 'Requirements Management' circle at the center of the ADM, ensuring that as the AI technology evolves, the risks (like AI hallucinations or data breaches) are continuously monitored against the initial requirements.

Why other options are incorrect:

Option A focuses too heavily on Organization Maps and Business Models. While useful, they don't directly address the cultural fears of job loss or the specific risks mentioned in the scenario.

Option B incorrectly suggests waiting until Implementation Governance to consider risk management. In TOGAF, risk must be managed throughout the entire lifecycle, starting as early as possible.

Option C mentions a Communication Plan, but it lacks the formal TOGAF rigor of documenting stakeholder 'power and influence' and integrating risk into the 'Architecture Requirements Specification.'

Comprehensive and Detailed Step-by-Step Explanation

Context of the Scenario

The scenario highlights significant risks due to ransomware attacks and the need to strengthen the company's Enterprise Architecture to improve data protection and resilience. TOGAF emphasizes the Architecture Compliance Review as a mechanism for ensuring the architecturemeets its objectives and addresses specific concerns such as security, resilience, and compliance with organizational goals.

The organization has already conducted a risk assessment but requires actionable steps to:

Address ransomware attack risks.

Increase the resilience of the Technology Architecture.

Ensure proper alignment with governance and compliance frameworks.

Option Analysis

Option A:

Strengths:

Highlights the need for up-to-date processes for managing changes in the Enterprise Architecture.

Recognizes the importance of governance through the Architecture Board and change management techniques.

Weaknesses:

The approach focuses solely on the Technology Architecture baseline but does not address the need for specific steps such as compliance review, gap analysis, or tailored resilience measures for ransomware risks.

It provides a broad and generic approach rather than a targeted plan for ransomware and data protection issues.

Conclusion: Incorrect. While it adheres to governance processes, it lacks specific actions to improve resilience and address the immediate security concerns.

Option B:

Strengths:

Proposes an Architecture Compliance Review, which is a core TOGAF process used to evaluate architecture implementation against defined objectives, ensuring it is fit for purpose.

Involves identifying stakeholders (departments) and tailoring checklists specific to ransomware resilience.

Emphasizes issue identification and resolution through structured review processes.

Weaknesses:

Does not explicitly address longer-term updates to the Enterprise Architecture, but this can be inferred as a next step following compliance recommendations.

Conclusion: Correct. This is the most suitable approach based on TOGAF principles, as it uses an established process to evaluate and improve the architecture's resilience.

Option C:

Strengths:

Includes monitoring for updates from suppliers to enhance detection and recovery capabilities, which is relevant to addressing ransomware risks.

Proposes a gap analysis to identify shortcomings in the current Enterprise Architecture and recommends addressing gaps through change requests.

Incorporates disaster recovery planning exercises, which are useful for testing resilience.

Weaknesses:

While thorough, the approach lacks the Architecture Compliance Review process, which is a more structured way to ensure the architecture meets resilience requirements.

Monitoring suppliers and running disaster recovery exercises are operational steps rather than strategic architectural improvements.

Conclusion: Incorrect. While it includes valid activities, it does not adhere to TOGAF's structured approach for architecture assessment and compliance.

Option D:

Strengths:

Proposes analyzing business continuity requirements and assessing the architecture for gaps, which is relevant to the scenario.

Suggests initiating an ADM cycle to address gaps, which aligns with TOGAF principles.

Weaknesses:

Focusing on initiating a new ADM cycle may be premature, as the immediate priority is to evaluate the existing architecture and address specific resilience concerns.

Does not mention compliance review or tailored resilience measures for ransomware attacks, which are central to the scenario.

Conclusion: Incorrect. It proposes a broader approach that may not adequately address the immediate concerns highlighted by the CSO.

TOGAF Reference

Architecture Compliance Review: A structured process used to evaluate whether an architecture meets the stated goals, objectives, and requirements (TOGAF 9.2, Chapter 19). It is particularly useful for identifying and addressing resilience requirements in scenarios involving security risks.

Stakeholder Engagement: Identifying and involving stakeholders (e.g., departments) is a critical part of architecture governance and compliance review (TOGAF 9.2, Section 24.2).

Change Management: The Architecture Compliance Review supports identifying necessary changes, which are then managed through governance and change management processes (TOGAF 9.2, Section 21.6).

By choosing Option B, you align with TOGAF's structured approach to compliance, resilience, and addressing security concerns.