OG0-092 Exam QuestionsBrowse all questions from this exam

OG0-092 Exam - Question 56


Scenario -

You are serving as the Lead Architect for an insurance company, which has been formed through the merger of three previously independent companies. The company now consists of three divisions with the same names and division headquarters as their predecessors.

The lack of integration between the three divisions has increasingly caused problems in the handling of customer and financial information. The inability to share information has resulted in lost opportunities to "leverage the synergies" that had been intended when the company was formed. At present, each division maintains its own applications. Despite an earlier initiative to install a common application to manage customer, products, and claims information, each division has different ways of defining these core elements and has customized the common application to the point where the ability to exchange information is difficult, costly, and error-prone.

As a result, the company has made the decision to introduce a common web portal, contact center software suite, and document management system. Also the company has selected a single enterprise-wide customer relationship management (CRM) application to consolidate information from several applications that exist across the divisions. The application will be used by each of the divisions and accessed by third party partners through well defined interfaces.

The Corporate Board is concerned that the new application must be able to manage and safeguard confidential customer information in a secure manner that meets or exceeds the legal requirements of the countries in which the company operates. This will be an increasingly important capability as the company expands its online services in cooperation with its partners.

The CIO has formed an Enterprise Architecture department, and one of the primary goals in its charter is to coordinate efforts between the implementation team and the migration teams in each division. The CIO has also formed a cross-functional Architecture Board to oversee and govern the architecture. The company has an existing team of security architects.

TOGAF 9 has been selected as the core framework for use for the Enterprise Architecture program. The CIO has endorsed this choice with the full support of top management.

In the Preliminary Phase you need to define suitable policies and ensure that the company has the appropriate capability to address the concerns of the Corporate

Board.

Based on TOGAF, which of the following is the best answer?

Show Answer
Correct Answer: C

In the Preliminary Phase of TOGAF, it is essential to evaluate the implications of the Corporate Board's concerns by examining security and regulatory impacts on business goals and objectives. Updating the current security policy to emphasize these concerns ensures that security considerations are prioritized. Defining architecture principles helps to create constraints on the architecture work, ensuring adherence to security requirements in all domains. Allocating a security architect to oversee the inclusion of security considerations across architecture planning further solidifies a comprehensive approach to address the Board's concerns.

Discussion

13 comments
Sign in to comment
tomvikOption: C
Jul 6, 2020

answer is C

rbaggio
Jan 28, 2021

It cannot be C. Enterprise Architects don't update security policy. "The company has an existing team of security architects."

Shalini8
Sep 28, 2022

read comment from LunchTime, answer is C ( though poorly explained)

aaa111222Option: C
Oct 7, 2020

Answer is C. D is describing "Requirement management" phase

rbaggio
Jan 28, 2021

It cannot be C. Enterprise Architects don't update security policy. "The company has an existing team of security architects."

CloudTripOption: D
Apr 3, 2021

Answer D is correct. You don't define the architecture principles or issue request for architecture yourself so A & C straightway out of the window. Among A,D read the requirement is question again i.e. one of the primary goals in its charter is to coordinate efforts between the implementation team and the migration teams in each division which is what clearly articulated in Answer D.

rbaggioOption: B
Jan 28, 2021

Answer is B. Preliminary Phase is about intent, the "Why?". It can't be A, as Enterprise Architects don't issue Request for Architecture Work. It can't be C, as Enterprise Architects don't update security policy.

CloudTripOption: D
Apr 3, 2021

Sorry the choice was between B & D. Wish there was an edit button here. Answer D looks fine because of the reasons mentioned earlier.

mrg998Option: D
Jun 26, 2021

Ans is D

susrideyOption: D
Jul 21, 2021

Answer is D, it is more comprehensive than B, A&C are out because of obvious reasons that others in this forum have mentioned.

LunchTimeOption: C
Jul 22, 2021

C is correct. Folks are getting way too hung up on “enterprise architectures don’t update security policy”. Updating the security policy in “C” is no different than “you ensure that written policies are put in place…” which is the wording in “D”. Most importantly, C provides the correct process  the business objectives drive the requirements. Architecture principles are put in place to guide decisions and security is embedded in all phases via security architects. This process addresses new security requirements or changes in the future. Answer D does not.

repudis
Oct 1, 2021

https://pubs.opengroup.org/architecture/togaf9-doc/arch/chap46.html The Solution Architect has the responsibility for architectural design and documentation at a system or subsystem level, such as management or security A Solution Architect may shield the Enterprise/Segment Architect from the unnecessary details of the systems, products, and/or technologies. The focus of the Solution Architect is on system technology solutions; for example, a component of a solution such as enterprise data warehousing. he Enterprise Architect has the responsibility for architectural design and documentation at a landscape and technical reference model level The Enterprise Architect often leads a group of the Segment Architects and/or Solution Architects related to a given program. The focus of the Enterprise Architect is on enterprise-level business functions required.

Fumoffuu
Nov 1, 2021

I second that. Ans is "C" Check "20.6.1 Business Principles", Principle 9. Security policy is clearly mentioned. Business Principles are part of Architecture Principle applicable at the Preliminary Phase.

repudis
Oct 1, 2021

Are you really sure about this? if so please provide official togaf documentation that really backs up your statements, otherwise this will be non-sense. Please, check the link I provided down.

scuzzy2010Option: C
Nov 7, 2021

I think it's C too. This is the Preliminary Phase and it's the only option which mentions architecture principles - "You define architecture principles"

red_pandaOption: C
May 18, 2023

Answer C is more correct than answer D because answer C highlights that security is a fundamental issue for all domains and not just for the application and the data domains.

WatadOption: D
Mar 11, 2023

repeated, see Question #18

bbccOption: D
Jan 7, 2024

D should be

el3ctronickOption: D
Feb 29, 2024

its D because the other three don't make sense