Free Access to TheOpenGroup.OGEA-103.v2026-09-12.q187 with Valid Practice Test (Page 8)

Question 31

Consider the following ADM phases objectives.

Which phase does each objective match?

A.1F-2G-3G-4H
B.1H-2F-3F-4G
C.1F-2G-3H-4H
D.1G-2H-3H-4F

Correct Answer: B

According to the TOGAF Standard, Version 9.2, the ADM phases and their objectives are as follows1:
Preliminary Phase: To prepare and initiate the architecture development cycle, including defining the architecture framework, principles, and governance.
Phase A: Architecture Vision: To define the scope, vision, and stakeholders of the architecture initiative, and to obtain approval to proceed.
Phase B: Business Architecture: To describe the baseline and target business architecture, and to identify the gaps between them.
Phase C: Information Systems Architectures: To describe the baseline and target data and application architectures, and to identify the gaps between them.
Phase D: Technology Architecture: To describe the baseline and target technology architecture, and to identify the gaps between them.
Phase E: Opportunities and Solutions: To identify and evaluate the opportunities and solutions for implementing the target architecture, and to define the work packages and transition architectures.
Phase F: Migration Planning: To finalize the implementation and migration plan, and to ensure alignment with the enterprise portfolio and project management.
Phase G: Implementation Governance: To provide architecture oversight and guidance for the implementation projects, and to manage any architecture change requests.
Phase H: Architecture Change Management: To monitor the changes in the business and technology environment, and to assess the impact and performance of the architecture.
Requirements Management: To manage the architecture requirements throughout the ADM cycle, and to ensure alignment with the business requirements.
Based on the above definitions, we can match each objective with the corresponding phase as follows:
Objective 1: Ensure that the business value and cost of work packages and transition architectures is understood by key stakeholders. This objective is achieved in Phase H: Architecture Change Management, where the value realization and cost-benefit analysis of the architecture are performed2.
Objective 2: Ensure conformance with the Target Architecture by implementation projects. This objective is achieved in Phase F: Migration Planning, where the conformance requirements and criteria for the implementation projects are defined3.
Objective 3: Ensure that the architecture development cycle is maintained. This objective is achieved in Phase F: Migration Planning, where the architecture roadmap and iteration cycle are maintained3.
Objective 4: Ensure that the Architecture Governance Framework is executed. This objective is achieved in Phase G: Implementation Governance, where the architecture governance processes and procedures are applied to the implementation projects4.
1: The TOGAF Standard, Version 9.2, Chapter 5: Architecture Development Method (ADM)
2: The TOGAF Standard, Version 9.2, Chapter 21: Architecture Change Management
3: The TOGAF Standard, Version 9.2, Chapter 20: Migration Planning
4: The TOGAF Standard, Version 9.2, Chapter 19: Implementation Governance
Topic 1, Part 2

Question 32

Which of the following describes the practice by which the enterprise architecture is managed and controlled at an enterprise-wide level?

A.Corporate governance
B.Architecture governance
C.IT governance
D.Technology governance

Question 33

Please read this scenario prior to answering the question
You are employed as an Enterprise Architect, reporting to the Chief Enterprise Architect, at a technology company. The company uses the TOGAF standard as the method and guiding framework for its Enterprise Architecture (EA) practice.
The nature of the business is such that the data and the information stored on the company systems is the company ' s major asset and is highly confidential. The company employees travel a lot for work and need to communicate over public infrastructure. They use message encryption, secure internet connections using Virtual Private Networks (VPNs), and other standard security measures. The company has provided computer security awareness training for all its staff. However, despite good education and system security, there is still a need to rely on third-party suppliers for infrastructure and software.
The Chief Security Officer (CSO) has noted an increase in ransomware (malicious software used in ransom demands) attacks on companies with a similar profile. The CSO recognizes that no matter how much is spent on education, and support, the company could be a victim of a significant attack that could completely lock them out of their important data.
A risk assessment has been completed and the company has looked for cyber insurance that covers ransomware. The price for this insurance is very high. The CTO recently saw a survey that said 1 out of 4 businesses that paid ransoms could not get their data back, and almost the same number were able to recover the data without paying. The CTO has decided not to get cyber insurance to cover ransom payment.
The Chief Technology Officer (CTO) is the sponsor of the EA project. The practice uses an iterative approach for its architecture development. This has enabled the decision makers to gain valuable insights into the different aspects of the business.
Refer to the scenario
You have been asked to describe the steps you would take to strengthen the current architecture to improve data protection.
Based on the TOGAF standard which of the following is the best answer?

A.You would ensure that the business value and cost of continuity measures are understood by key stakeholders and would ensure that the company has in place up-to-date processes for managing change to the current Enterprise Architecture. You recommend that mitigation for a ransomware attach be addressed at the infrastructure level with specific technology controls. Changes should be made to the baseline description of the Technology Architecture. The changes should be approved by the Architecture Board and a change request approved.
B.You would hold an Architecture Compliance Review with the scope to examine the company ' s ability to respond to ransomware attacks. You would identify the departments involved and have them nominate representatives. You would then tailor checklists to address the requirement for increased business continuity and resilience. You would circulate to the nominated representatives for them to complete. You would then review the completed checklists, identifying and resolving issues. You would then determine and present your recommendations.
C.You would run an assessment to identify the business continuity requirements and analyze thecurrent Enterprise Architecture for gaps. You would create a change request to start a further cycle of architecture work to address changes to mitigate such an attack. You would arrange a meeting of the Architecture Board to assess and approve the change request. Once approved you would create a new Request for Architecture Work to begin an ADM cycle to implement the changes.
D.You would contact existing suppliers for technology that could enhance the company ' s capabilities to detect, react, and recover from an incident. You would perform an analysis and assessment of a simulated ransomware attack to evaluate the current Enterprise Architecture ' s resilience and recovery capabilities. Using the findings, you would prepare a gap analysis of the current Enterprise Architecture. You would prepare change requests to address identified gaps. You would add the changes implemented to the Architecture Repository.

Correct Answer: C

The question asks:
"What steps would you take to strengthen the current architecture to improve data protection?" This requires understanding how TOGAF handles:
Business continuity requirements
Gap analysis in existing architecture
Architecture change requests
Triggering a new ADM cycle
Governance via the Architecture Board
Option C is the only answer that aligns correctly with TOGAF's formal Architecture Change Management process (ADM Phase H) and how to progress from identifying gaps to initiating a new cycle.
# Why Option C Is Correct
# 1. Starts with identifying business continuity requirements
TOGAF Phase A and Phase B require understanding business continuity and information security requirements as part of architecture development.
# 2. Analyzes the current architecture for gaps
Gap analysis is a required step in:
Phase B (Business Architecture)
Phase C (Data/Application Architecture)
Phase D (Technology Architecture)
It is also part of Architecture Change Management (Phase H) when examining existing threats or deficiencies.
# 3. Creates a Change Request
In TOGAF, if gaps or new risks require architectural enhancements, a formal Change Request is submitted.
This is a mandatory TOGAF mechanism.
# 4. Architecture Board evaluates the Change Request
The Architecture Board approves major changes before a new cycle starts - exactly as described in option C.
# 5. Initiates a new ADM cycle with a RfAW
TOGAF explicitly states:
A new or major architecture change requires a Request for Architecture Work before beginning a new ADM cycle.
Option C follows this sequencing precisely:
Identify requirements # analyze gaps # issue change request # Architecture Board approval # create RfAW # start new ADM cycle.
This is textbook TOGAF.
# Why the Other Options Are Incorrect
A - Too narrow and focuses only on Technology Architecture
The problem spans business continuity, data protection, and enterprise-wide readiness - not just infrastructure.
Does not include gap analysis, stakeholder analysis, or initiating a formal ADM cycle.
Incorrectly reduces ransomware mitigation to technology controls.
B - Architecture Compliance Review is inappropriate here
A Compliance Review is used to:
Ensure implementation conforms to architectureNot to:
Identify new risks
Strengthen the architecture
Conduct gap analysisThis option is misusing the review process.
D - Supplier-driven, not TOGAF-driven
Involves contacting suppliers prematurely - not aligned with TOGAF's architecture-first methodology.
Does not involve Architecture Board approval before pursuing solutions.
Jumps into solutioning before architectural approval.
# Relevant TOGAF References
Phase H: Architecture Change Management
Manage changes
Evaluate impacts
Generate change requests
Architecture Board Roles
Approves Change Requests
Governs new ADM cycles
Request for Architecture Work
Used to formally launch a new ADM cycle

Question 34

Which of the following are the four purposes that typically frame the planning horizon, depth and breadth of an Architecture Project, and the contents of the EA Repository-?

A.General Foundational Subordinate and Superior Architecture
B.Segment, Capability. Enterprise and End-to-end Target Architecture
C.Avant-Garde Big-Bang, Discreet and Cohesive
D.Strategy Portfolio Project Solution Delivery

Question 35