TOGAF TOGAF Security and Risk Architecture 2

Question 1

What is a 'Risk Register' in the context of TOGAF architecture governance?

Accepted Answer

A document capturing identified risks, their classification, mitigation strategies, and ownership throughout the architecture lifecycle

Answer

The Risk Register is a governance artifact capturing all identified risks to the architecture, with their classification, probability, impact, mitigation approaches, and responsible owners.

Question 2

In TOGAF, how does security architecture relate to the concept of 'Architecture Building Blocks'?

Accepted Answer

Security capabilities can be defined as Architecture Building Blocks (ABBs) and implemented as Solution Building Blocks (SBBs) for reuse

Answer

Security capabilities (e.g., identity management, encryption services) can be defined as ABBs specifying the required capability and then implemented as SBBs representing specific products.

Question 3

What is the purpose of a 'Security Architecture View' in TOGAF?

Accepted Answer

To communicate the security architecture to security-focused stakeholders by addressing their specific security concerns

Answer

A Security Architecture View addresses the concerns of security-focused stakeholders, showing how security requirements and controls are incorporated across the architecture domains.

Question 4

How does TOGAF recommend integrating compliance requirements (e.g., regulatory, legal) into the architecture?

Accepted Answer

Compliance requirements should be captured as architecture requirements and constraints early in the ADM, influencing architecture decisions

Answer

TOGAF recommends treating regulatory and compliance requirements as architecture constraints captured early in the ADM (Phase A/B) so they influence all subsequent architecture decisions.

Question 5

What does the TOGAF concept of 'Security Zoning' contribute to Technology Architecture design?

Accepted Answer

Segmenting the technology environment into zones with different trust levels and controlling inter-zone traffic

Answer

Security Zoning divides the technology architecture into trust zones (e.g., DMZ, internal, restricted) with defined controls on traffic between zones, a key element of Technology Architecture.

TOGAF - The Open Group Architecture Framework Practice Test

TOGAF - The Open Group Architecture Framework Practice Test

TOGAF TOGAF Security and Risk Architecture 2