THE-OPEN-GROUP-OG0-092 practice question 8 of 15

Scenario: Please read this scenario prior to answering the Question You are serving as the Chief Architect for a large, global commodities trading…

Full set: 75 questions

Domain The Architecture Development Method (ADM)

Scenario: Please read this scenario prior to answering the Question You are serving as the Chief Architect for a large, global commodities trading company which has been growing rapidly through a series of acquisitions. Each business is performing well in its markets. However, the lack of integration between headquarters and the business units has increasingly caused problems in the handling of customer and financial information. The inability to share information across businesses has resulted in lost opportunities to "leverage the synergies" that had been intended when the businesses were acquired. At present, each business unit maintains its own applications. Despite an earlier initiative to install a common application to manage customer, products, supplier, and inventory information, each business unit has different ways of defining each of these core elements and has customized the common application to the point where the ability to exchange information is difficult, costly, and error-prone. As a result, the company has made the decision to introduce a single enterprise-wide application to consolidate information from several applications that exist across the lines of business. The application will be used by all business units and accessed by suppliers through well defined interfaces. The Corporate Board is concerned that the new application must be able to manage and safeguard confidential customer information in a secure manner that meets or exceeds the legal requirements of the countries in which the company operates. This will be an increasingly important capability as the company expands its online services in cooperation with its trading partners. The CIO has formed an Enterprise Architecture department, and one of the primary goals in its charter is to coordinate efforts between the implementation team and the business unit personnel who will be involved in the migration process. The CIO has also formed a cross-functional Architecture Board to oversee and govern the architecture. The company has an existing team of security architects. TOGAF 9 has been selected for use for the Enterprise Architecture program. The CIO has endorsed this choice with the full support of top management. Refer to the Scenario In the Preliminary Phase you need to define suitable policies and ensure that the company has the appropriate capability to address the concerns of the Corporate Board. Based on TOGAF 9, which of the following is the best answer?
Answer options
A: You start by clarifying the intent that the Board has for raising these concerns. This enables you to understand the implications of the concern in terms of regulatory requirements and the potential impact on current business goals and objectives. You propose that a security architect or security architecture team be allocated to develop a comprehensive security architecture and that this be considered an additional domain architecture.
B: You evaluate the implications of the Board's concerns by examining the security and regulatory impacts on business goals, business drivers and objectives. Based on your understanding, you then update the current security policy to include an emphasis on the concerns. You define architecture principles to form constraints on the architecture work to be undertaken in the project. You then allocate a security architect to ensure that security considerations are included in the architecture planning for all domains. Correct answer
C: You identify and document the security and regulatory requirements for the application and the data being collected. You ensure that written policies are put in place to address the requirements, and that they are communicated across the organization, together with appropriate training for key employees. You identify constraints on the architecture and communicate those to the architecture team. You establish an agreement with the security architects defining their role within the ongoing architecture project.
D: You evaluate the implications of the concerns raised by the Corporate Board in terms of regulatory requirements and their impact on business goals and objectives. Based on this understanding, you then issue a Request for Architecture Work to commence an architecture development project to develop a solution that will address the concerns. You allocate a security architect to oversee the implementation of the new application that is being developed.
Correct Answer:
B. You evaluate the implications of the Board's concerns by examining the security and regulatory impacts on business goals, business drivers and objectives. Based on your understanding, you then update the current security policy to include an emphasis on the concerns. You define architecture principles to form constraints on the architecture work to be undertaken in the project. You then allocate a security architect to ensure that security considerations are included in the architecture planning for all domains.
Explanation

The Preliminary Phase in TOGAF is focused on establishing the Enterprise Architecture (EA) capability, not on developing specific architectures. Option B correctly outlines the key activities for this phase in response to the Board's concerns. It begins by understanding the business context ("evaluate the implications... on business goals, business drivers and objectives"). It then addresses governance by updating policy and defining Architecture Principles, which are core outputs of the Preliminary Phase. Finally, it establishes the necessary capability by allocating a security architect to ensure security is a cross-cutting concern, which is the correct TOGAF approach for handling security architecture.

Why Incorrect

A: Developing a "comprehensive security architecture" is an activity for the subsequent ADM Phases (B, C, D), not the preparatory Preliminary Phase. C: Identifying detailed requirements and constraints is a primary activity of Phase A (Architecture Vision), which follows the Preliminary Phase. D: Issuing a "Request for Architecture Work" is an output of Phase A, and overseeing implementation is the focus of Phase G (Implementation Governance).

References

1. Defining Architecture Principles: The TOGAF® Standard, Version 9.2, Chapter 5, Section 5.3, Step 5, "Define and Establish Architecture Principles", explicitly lists this as a key step in the Preliminary Phase.

2. Establishing EA Capability and Governance: The TOGAF® Standard, Version 9.2, Chapter 5, Section 5.3, Steps 2 and 4, cover confirming the governance framework (which includes policies) and establishing the architecture capability by understanding the business environment.

3. Allocating Security Resources: The TOGAF® Standard, Version 9.2, Chapter 36, "Security Architecture", describes security as a cross-cutting concern that must be addressed in all architecture domains, supporting the role described in option B. Establishing the team to do this is part of the Preliminary Phase (Chapter 5, Section 5.3, Step 3).

4. Distinction from Phase A: The TOGAF® Standard, Version 9.2, Chapter 6, "Phase A: Architecture Vision", details the creation of the Request for Architecture Work (Section 6.6) and the identification of business requirements (Section 6.4.3), confirming that activities in options C and D occur after the Preliminary Phase.

Keep practicing

Take the free THE-OPEN-GROUP-OG0-092 practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test

More questions

Other THE-OPEN-GROUP-OG0-092 practice questions

Scroll to Top