OG0-093 practice question 27 of 35

Scenario: Please read this scenario prior to answering the question The ABC company is a large, global commodities trading company which has been…

Full set: 419 questions
Scenario: Please read this scenario prior to answering the question The ABC company is a large, global commodities trading company which has been growing rapidly through a series of acquisitions. Each new business is performing well in its markets. However, the lack of integration between headquarters and the business units has increasingly caused problems in the handling of customer and financial information. The inability to share information across businesses has resulted in lost opportunities to "leverage the synergies" that had been intended when the businesses were acquired. At present, each business unit maintains its own applications. Despite an earlier initiative to install a common application to manage customer, products, supplier, and inventory information, each business unit has different ways of defining each of these core elements and has customized the common application to the point where the ability to exchange information is difficult, costly, and error-prone. As a result, the company has begun implementing a single Enterprise Resource Planning (ERP) system to consolidate information from several applications that exist across the lines of business. The Corporate Board is concerned that the new ERP system must be able to manage and safeguard customer information in a manner that meets or exceeds the legal requirements of the countries in which the company operates. This will be an increasingly important capability as the company expands its online services offered to clients and trading partners. The CIO has formed an Enterprise Architecture department, and one of the primary goals in its charter is to coordinate efforts between the ERP implementation team and the business unit personnel who will be involved in the migration process. The CIO has also formed a cross-functional Architecture Review Board to oversee and govern the architecture. The company has selected TOGAF 9 as the basis for its Enterprise Architecture program. The CIO has endorsed this choice with the full support of top management. Refer to the Scenario You are serving as the Chief Architect. You have been asked to recommend the approach to take in the Preliminary Phase to ensure that the Corporate Board's concern is addressed. Based on TOGAF 9, which of the following is the best answer?
Answer options
A: You evaluate the implications of the Board's concern in terms of regulatory and security policy requirements. You then update the company security policy to reflect the concern, ensuring that this policy is communicated across the organization.You allocate a security architecture team to ensure that security considerations are included in ongoing architecture planning. You then assess the security implications and agreements within the company businesses and their suppliers.
B: You start by clarifying the intent that the Board has for raising this concern. This enables you to understand the implications of the concern in terms of regulatory requirements and the potential impact on current business goals and objectives. You propose that a security architect or security architecture team be allocated to develop a comprehensive security architecture.
C: You evaluate the implications of the Board's concern in terms of regulatory requirements and their impact on business goals and objectives. Based on this understanding, you then issue a Request for Architecture Work to commence an architecture development project to develop a solution that will address the Board's concern. You allocate a security architect to oversee the implementation of the solution in the ERP system that is being developed.
D: You evaluate the implications of the Board's concern by examining the potential impacts on business goals and objectives. Based on your understanding, you then update the current company security policy to include an emphasis on the Board's concern.In addition, you allocate a security architect to ensure that security considerations are included in the architecture planning for all domains. Correct answer
Correct Answer:
D. You evaluate the implications of the Board's concern by examining the potential impacts on business goals and objectives. Based on your understanding, you then update the current company security policy to include an emphasis on the Board's concern.In addition, you allocate a security architect to ensure that security considerations are included in the architecture planning for all domains.
Explanation

The Preliminary Phase establishes architecture principles, governance and security policies. Updating the corporate security policy to incorporate the Board’s privacy concern and assigning a security architect to embed those requirements across all architecture work meets TOGAF §6.4 tasks (“Establish Governance and Support Frameworks”) and ensures that every subsequent phase of the ADM will address legal data-protection obligations.

Why Incorrect

A Focuses narrowly on infrastructure agreements and skips embedding security into all domains from the outset. B Identifies concern but defers action; lacks policy update or governance integration mandated in Preliminary Phase. C Prematurely starts architecture work (Request for Architecture Work) before establishing principles and policy foundations.

References

1. TOGAF® Standard, Version 9.2, Part II, 6.4.1-6.4.5 “Objectives & Steps of the Preliminary Phase” (pp.70-74).

2. TOGAF® Standard, Version 9.2, Part III, 20.1 “Architecture Governance” – ensure policies exist before ADM cycles (p.259).

3. Open Group White Paper W14C “Security Architecture and the TOGAF ADM”, §2 (pp.3-4).

4. IEEE Security & Privacy, Vol 17-3 (2019) 72-75, “Integrating Data-Protection Requirements into Enterprise Architecture”, DOI:10.1109/MSEC.2019.2906339.

5. Stanford CS 309A Lecture 10 notes “Policy-Driven Enterprise Architecture” (2021).

Keep practicing

Take the free OG0-093 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test

More questions

Other OG0-093 practice questions

Scroll to Top